Email spoofing

Email spoofing and email phishing use deception to trick users into providing sensitive and important information. Email spoofing involves the use of a header appearing to have originated from someone (or somewhere) other than the true source.

What is meant by spoofing attack?

A spoofing attack is when a malicious party imitates another device or user in order to steal important data, or spared malware.

Why spoof someone’s email address?

Spoofing and Phishing are performed to get bank information, credit card numbers, and other personal information from fake web pages.
Emails that contain phishing links are often altered to look like they came from the site they’re targeting (for example, your bank)
Many email service providers allow you to send mail to yourself, it’s a great way to save a copy of outgoing for example. Spoofers can use this feature to make an email look you sent the message to yourself.

How Does Spoofing Work?

Spoofing users alter many sections of an email to disguise the true sender, there are some properties that can be spoofed:
– FROM (name or address): can be changed by using settings in Microsoft Outlook, Gmail, Hotmail, or other email software.
– REPLY TO (name or address): can be changed by using settings in Microsoft Outlook, Gmail, Hotmail, or other email software.
– RETURN-PATH (address): can be changed by using settings in Microsoft Outlook, Gmail, Hotmail, or other email software.
– SOURCE IP (address): require advanced knowledge to create a false IP address.