Detects inbound emails from conceptboard.com where the message body references an organizational VIP's display name paired with the phrase 'wants to work with you,' indicating a VIP impersonation lure used to coax recipients into engaging with a fraudulent workspace invitation. The rule checks that the email's sender domain root is conceptboard.com and searches the current thread body for any configured VIP display name followed by 'wants to work with you'. If a match is found against the VIP list ($org_vips), it flags potential BEC/Fraud or spam. This detection relies on content analysis (body text) and sender analysis (domain). It targets social engineering via impersonation of executives or VIPs and is intended to mitigate abuse of legitimate collaboration tools. The VIP list should be maintained to minimize false positives, and the rule could be enhanced with multiple phrasings, localization, and cross-reference with invitation metadata to reduce risk of legitimate communications triggering alerts.