From:name spoofing

[David Jones]

We have covered this issue a few times recently on this list but I don't 
think anything definitive was ever decided or recommended to detect and 
block this sort of spoofing:

https://pastebin.com/juXLD8vr
This appears to be a spoofed email from a compromised account trying to 
be a known corespondent to this customer of mine.

The Message-ID is suspicious since it's an inbound email to the 
hck12.net domain.

--
David Jones