Hello,
Some user in my organization reported that he received a mail from another collaborator (same internal domain).
The mail look very legit (right sender and recipient adress) but after looking trought the header, it was easy so see it's a spoofed mail . How can i setup a protection from O365, what is the best practice please.
The SMTP mail from adress and Return path have been modified :
