... extra network chatter. The usual pile of Rust cargo fmt'd into submission, plus fresh strings across all 11 languages. Grab it here: https://github.com/nikserg/skim/... Comment from Nick Zarubin(@n_zarubin): @omri_ben_shoham1  Great question BEC is exactly the case where authentication-based signals go blind, by definition: the mail genuinely is from that account, so SPF/DKIM/DMARC pass honestly and sender history looks perfect. Two things in Skim still apply there, though: The link-level checks ... ... That was a conscious call precisely because of the compromised-account case: we didn't want Skim vouching for a message just because DMARC passed. Absence of warnings endorsement. What we honestly don't catch deterministically: the link-free BEC

... founder of PhishGuard AI an AI-powered email threat detection platform built for organizations that are tired of getting hit by phishing, Business Email Compromise, and social engineering attacks that bypass every standard filter. After losing money to a BEC attack and realizing the market had nothing that caught the behavioral layer of email threats, I built it myself. What PhishGuard AI does: Multi-LLM phishing analysis Behavioral anomaly & psychological trigger detection Sender profiling & threat intelligence enrichment Microsoft ... ... integration + SIEM support Automated incident response & executive reporting It s built for IT teams, MSPs, and CISOs who need more than Defender and spam filters. Would love honest feedback especially from anyone who s dealt with BEC