This talk is from the 2020 Black Hat Conference. The presentation (40 mins) is on YouTube: https://www.youtube.com/watch?v=ar_lVqkWcHk

One of the authors of the research, Jianjun Chen, demonstrates email spoofing using Gmail, Yahoo and Outlook in these short (1 min) videos from 2020.

Email spoofing demos (2020): https://www.youtube.com/playlist?list=PL--A-gWJV1dJ19Syhkzkl...

Status:

- Gmail: "fixed"

- Yahoo: "reported to Yahoo security on Oct 28th, 2019. They disregarded our report."

- Outlook: "reported to Microsoft security on Oct 28th, 2019. They disregarded our report ("Unfortunately your report appears to rely on social engineering to accomplish, which would not meet the bar for security servicing")."

I assume the response from the Outlook team ("social engineering") refers to the fact that body of the email must still contain a phishing link.