We use google apps for business to host our business emails, using our own custom domain
I view my emails via gmail.com
I recently received an email from
email@example.com stating id been hacked etc.. send BTC.. They even had a password that i had used previously. (The password they had was obviously from a data dump of a hacked site and as we use a password manager to create unique passwords im not too concerned.)
My concern is how they where able to spoof the from address ? I thought google apps for business had some default protection against this ? How can i protect against this ?