Abnormal

REPORTING

  • Dashboard

MESSAGING

  • Threat Log
  • Outbound Log
  • AI Security Mailbox
  • Vendor Fraud
  • Search & Respond
  • Detection 360°

ACCOUNT

  • Account Takeover

POSTURE

  • App Posture
  • People Posture
  • Tenant Posture

KNOWLEDGE

  • AppBase
  • PeopleBase
  • TenantBase
  • VendorBase
  • ThreatIntelBase

ENHANCE

  • Success Criteria
  • Abnormal App Store
  • Deployment Overview
  • Platform Integrations
  • Settings
Outbound Log>

Message Details

Company
User Name
Update on Project Sardine
5 hours agoJan 25, 2025, 7:22am PST

Analysis Overview

Abnormal believes this email was intended for Josh Waters (josh.waters@enterprise.com) but was sent to Josh Waters (josh.waters@company.com) due to a similar display name.

AUTOFILL RISK

The recipient has a display name "Josh Waters", which increases the risk of selecting the wrong recipient.

INTERNAL-INTENDED ATTACHMENT

The attachment name references "Internal", a keyword for sensitive company data which may not be intended for external recipients.

Email Content

Subject: Update on Project Sardine
Sender: Jonathan Green <jonathan.green@enterprise.com>
To: Josh Waters <josh.waters@company.com>
Jan 25, 2025, 7:22am PST
Internal Project Sardine.xlsx

Hi Josh,

Apologies for the delays—there were a few moving pieces, but we've now finalized the plan. Attached is the updated timeline for Project Sardine, reflecting the most recent adjustments and deliverable milestones. We've adjusted the timeline to account for additional time that may be needed for testing before the launch. Please take a look.

Best,

Jonathan

Activity log

Employee Canceled Sending of Email
Jan 25, 2025, 7:23am PST
Abnormal Notified Employee
Jan 25, 2025, 7:22am PST
Routed to Microsoft Quarantine
Jan 25, 2025, 7:22am PST
Flagged by Abnormal
Jan 25, 2025, 7:22am PST

Engineering Reference Only

Heuristic Name
sensitive-attachment-to-external-with-internal-lookalike
When to show
Always show
Email Notification