Tell HN: Masked email address on Gmail leading phishing attacks
2 sumodm 0 5/26/2025, 9:47:31 AM
Because Gmail UX nowadays does not show email address by default and just the name, this is becoming an attack vector. This typically is leveraged by sending email signed with a person's name that is similar to a colleague (typically a manager/founder etc). Then they ask for seeming ordinary sounding requests like 'Are you free for a quick call', 'Wanted to discuss something with you' or 'Can you buy XYZ for the office'. Gmail please fix this, at-least show a different icon or email address for a user that has not interacted with you.
No comments yet