Mailsploit: it's 2017, and you can spoof the 'from' field in e-mail

https://www.theregister.co.uk/2017/12/06/mailsploit_email_spoofing_bug/