Abnormal

REPORTING

  • Dashboard

MESSAGING

  • Threat Log
  • Outbound Log
  • AI Security Mailbox
  • Vendor Fraud
  • Search & Respond
  • Detection 360°

ACCOUNT

  • Account Takeover

POSTURE

  • App Posture
  • People Posture
  • Tenant Posture

KNOWLEDGE

  • AppBase
  • PeopleBase
  • TenantBase
  • VendorBase
  • ThreatIntelBase

ENHANCE

  • Success Criteria
  • Abnormal App Store
  • Deployment Overview
  • Platform Integrations
  • Settings
Outbound Log>

Message Details

Company
User Name
Copper House - Updated Invoice
1 day agoJan 24, 2025, 2:45pm PST

Analysis Overview

Abnormal believes this email may likely be misdirected as the recipient Brock Mason (brock.mason@copperstokes.com) may not be associated with the entity Viewsight Industries mentioned in the attachment name.

RECIPIENT DOMAIN MISMATCH WITH ATTACHMENT

The attachment name references "Viewsight Industries" which might not be intended for a recipient at copperstokes.com.

Email Content

Subject: Copper House - Updated Invoice
Sender: Josh Waters <josh.waters@enterprise.com>
To: Brock Mason <brock.mason@copperstokes.com>
Jan 24, 2025, 2:45pm PST
Invoice 2024 - Viewsight Industries.pdf

Hi Brock,

I hope you're doing well!

I've attached an updated invoice for 2025. This includes the additional 5% volume discount we discussed yesterday.

Please review this at your earliest convenience.

Thank you,

Josh

Activity log

Employee Canceled Sending of Email
Jan 24, 2025, 2:46pm PST
Abnormal Notified Employee
Jan 24, 2025, 2:45pm PST
Routed to Microsoft Quarantine
Jan 24, 2025, 2:45pm PST
Flagged by Abnormal
Jan 24, 2025, 2:45pm PST

Engineering Reference Only

Heuristic Name
subject-and-attachment-client-mismatch (Attachment)
When to show
If only attachment is mismatched with recipient domain
Email Notification