Phishing actors are exploiting misconfigurations and complex routing to spoof domains, potentially enabling internal phishing attacks. This issue may be related to email routing in certain environments, such as microsoft 365 and exchange. The exact scope and nature of the threat are not entirely clear, with reports mentioning various types of phishing attacks and vulnerabilities.