Microsoft said that Office 365 tenants with weak configurations and who don't have strict anti-spoofing protection enabled ...
“Successful credential compromise through phishing attacks may lead to data theft or business email compromise (BEC) attacks ...
Threat actors are exploiting complex routing scenarios and misconfigured spoof protections to send spoofed phishing emails, ...