Many of the recipient domains lacked proper email authentication controls, including: No DKIM records Missing or unenforced DMARC policies Misconfigured SPF settings “This is a fresh spin on the ...