Private Industry Notification warns of the role email auto-forwarding could be used in business email compromise attacks. Source