Replying to a message from: Tommy

Some hackers using thousands of hotmail.com accunts to send spams,all emails are SPF,DKIM passed,that means it is 100% sure from microsoft's server.

For example,if my domain is abcde.com,they are sending as below

From: jacket <hotmail email> To:jacket@abcde.com

From: tommy <hotmail email> To:tommy@abcde.com

From: steven <hotmail email> To:steven@abcde.com

The account part before @abcde.com is usd at From header. Is it possible to add new filter for this?