Tell HN: Masked email address on Gmail leading phishing attacks
Because Gmail UX nowadays does not show email address by default and just the name, this is becoming an attack vector. This typically is leveraged by sending email signed with a person's name that is similar to a colleague (typically a manager/founder etc). Then they ask for seeming ordinary sounding requests like 'Are you free for a quick call', 'Wanted to discuss something with you' or 'Can you buy XYZ for the office'. Gmail please fix this, at-least show a different icon or email address for a user that has not interacted with you.
0 comments
—