Attack types
표시이름 사칭 (Display-name spoofing)
Definition
Faking only the display name (e.g., an exec or brand) while the real address differs.
For executives (CEO·CISO)
DMARC won't stop it — the real domain is fine and only the display name is faked, and it's especially convincing on mobile where the address is hidden. Commonly missed: don't rely on auth (SPF/DKIM/DMARC) alone — verify your solution detects display names impersonating execs/brands.