I recently stumbled onto a mail with a Spam link where the FROM header field looked like this:From: "Firstname Lastname@" <recipient-domain.com sendern...@real-senders-domain.com>
Jakob, just wanted to let you know I identified this issue as well and just opened a ticket about it yesterday to try and figure out a rule against it. Can you send me spamples via pastebin, please?
Regards, KAM