Install advanced email filtering solutions.  Carry out regular phishing awareness and training of the staff concerning security. Apply multi-factor authentication for email accounts. Make use of threat intelligence in order to stay updated about any new phishing techniques.