Companies can protect themselves by implementing advanced phishing protection tools, educating employees on how to recognise phishing attempts, and using email authentication protocols such as DMARC, SPF, and DKIM to verify the legitimacy of incoming emails.