Cybercriminals use email spoofing to trick recipients into thinking that an email is from a legitimate sender. This can be done by forging the sender's email address, display name, or both. In some cases, the spoofed email may even contain logos or other branding from the legitimate sender to make it appear even more authentic.

Phishing is a type of social engineering attack that uses fraudulent emails or websites to trick victims into giving up their personal information, such as passwords, credit card numbers, or Social Security numbers. Phishing attacks are one of the most common types of cyberattacks, and they can be very successful.