Phishing is a constant cat and mouse game. Most organizations are now doing SPF, DMARC and other technologies to prevent spoofed emails from making it into your user’s inbox. Attackers have now been shifting to using real accounts from providers.
Article Link: https://isc.sans.edu/diary/rss/24696