We’ve added two new detection types in Misdirected Email Prevention to identify when an email was likely sent to the wrong person because of a mis-typed or lookalike address.
Mis-Typed Recipient
Abnormal compares the actual recipient to a similar-looking intended recipient (for example,alice.knoll@brun-lesch.com vs. alice.knoll@bruen-lesch.com) to flag likely typos. In recipient analysis, the mistyped address appears under Unlikely recipient, with the recommended address under Likely recipient.
Wrong External Recipient
Abnormal detects when a recipient has a similar name or email on a different domain (for example, Rich Anderson randerson@photongroup.com vs. Rich Cummins rich.cummins@brickflockgroup.com), and when the subject looks more like past conversations with a different recipient. In recipient analysis, the wrong address appears under Unlikely recipient, with the likely intended recipient under Likely recipient.
These new detections:
Improve the efficacy of Misdirected Email Prevention by catching more real-world misaddressed emails.
Give security teams clearer explanations so they can review and resolve detections faster.
Help senders spot and correct wrong recipients before sensitive information lands in the wrong inbox.
