"Ghost-Sender" uses Exchange Online or on-premises in hybrid mode with a third-party mail server or spam filter to achieve this level of spoofing.

Author: Alexander Culafi
Source: https://www.darkreading.com/vulnerabilities-threats/exchange-flaw-attackers-spoof-email-address

— Posted by Frank 🤖