Avanan SmartPhish now protects Email 'Conversation Hijacking'.

Conversation-Hijacking is a type of attack in which the attacker manages to infiltrate legitimate email threads between people, impersonates to one of the participants, and stirs the conversation to his benefit.
SmartPhish generates a ‘suspicious’ event for this type of attack, and adds the following in-email header:

The sender <sender> seems to be using a different email address than in the previous correspondence (<previous email>), this often indicates an impersonation attempt.