This question already has an answer here:
I just received a mail from my boss saying someone with my mail has send some request for money. I is kinda serious and I know it is easy to spoof a mail, but the mail is email@example.com. So my question is, does the one spoofing the mail has to have the @mycompany.com user name and password?
TLDR: if someone mimics my company mail, does he need to be part of the company to do so? does he need a company mail
Thank you for reading.