We haven't solved how to prevent large-scale email spoofing attacks that impersonate trusted organizations convincingly.
open
Global / Unspecified, Global
WS00827
Attackers can still forge email headers to make messages appear to come from trusted banks, companies, or government agencies, despite improved authentication protocols. Full adoption and enforcement of stronger email verification standards remains inconsistent.