Abnormal

REPORTING

  • Dashboard

MESSAGING

  • Threat Log
  • Outbound Log
  • AI Security Mailbox
  • Vendor Fraud
  • Search & Respond
  • Detection 360°

ACCOUNT

  • Account Takeover

POSTURE

  • App Posture
  • People Posture
  • Tenant Posture

KNOWLEDGE

  • AppBase
  • PeopleBase
  • TenantBase
  • VendorBase
  • ThreatIntelBase

ENHANCE

  • Success Criteria
  • Abnormal App Store
  • Deployment Overview
  • Platform Integrations
  • Settings
Outbound Log>

Message Details

Company
User Name
Updated Quarterly Review Report
5 days agoJan 20, 2025, 1:10pm PST

Analysis Overview

Abnormal believes this is an unusual group of recipients and the one of the email recipients may likely be misdirected.

MISMATCHED EXTERNAL RECIPIENT DOMAINS

Email contains recipients from kling-array.com and wolffhane.com. This combination of recipients may be unusual.

RECIPIENT DOMAIN MISMATCH WITH ATTACHMENT

The attachment name references "Kling Array" which might not be intended for a recipient at wolffhane.com.

Email Content

Subject: Updated Quarterly Review Report
Sender: Renee West <renee.west@enterprise.com>
To: Amanda Roves <amandaroves@wolffhane.com>, Rick Sherman <ricks@kling-array.com>, Amelia Dawn <ameliad@kling-array.com>, Julie Bard <julieb@kling-array.com>, Jack Welch <jackw@kling-array.com>
Jan 20, 2025, 1:10pm PST
Kling Array Quarterly Report - Q42024.pptx

Hi Everyone,

I hope you're all doing well!

Attached is the updated Quarterly Review Report, which includes key performance insights, updates, and areas of focus for the upcoming quarter. Please review and let me know if you have any feedback or questions ahead of our next discussion.

Looking forward to hearing your thoughts. Let me know if there's anything specific you'd like to cover in our meeting.

Best,

Renee

Activity log

Employee Canceled Sending of Email
Jan 20, 2025, 1:11pm PST
Abnormal Notified Employee
Jan 20, 2025, 1:10pm PST
Routed to Microsoft Quarantine
Jan 20, 2025, 1:10pm PST
Flagged by Abnormal
Jan 20, 2025, 1:10pm PST

Engineering Reference Only

Heuristic Name
subject-and-attachment-client-mismatch-with-unusual-recipient-group (Attachment)
When to show
If only attachment is mismatched with recipient domain
Email Notification