I detailed a solution earlier this month for a similar attack from people purporting to be Waller Truck Company. The solution is detailed here – all you have to do different is create the filter using the search condition:
Has the words: is:spam newman esmond
I didn’t add ‘eisenberg’ to the condition test because sometimes it gets shortened to ‘Eisen.’ in the email subject and sometimes they use ‘NEE’ instead.
