Threat actors are abusing misconfigured MX records and weak DMARC/SPF policies to make phishing emails look internal, bypassing filters and increasing credential theft risk.

“Successful credential compromise through phishing attacks may lead to data theft or business email compromise (BEC) attacks ...