Cloud-native protection against sophisticated email-based threats