Our company has received this email this morning. It was only sent to 1/4 of our staff and is questionable. After researching the header, the DKIM signature failed. The ip address is 184.108.40.206, according to Cisco Talos states it is Microsoft. But I am still Leary on telling our folks that it is ok.
Has anyone else experienced this and is it legitimate?