Spoofed Apple/Find My display name mail sent from consumer webmail

Ibrahim Saud@tektrix

•updated Sep 23, 2026•0•0•2

Detects incoming emails that use 'Apple' or 'Find My' related strings in the sender display name while originating from common consumer email relay domains like Gmail or iCloud, which is indicative of a social engineering or phishing attempt attempting to impersonate Apple support.