Spoofing

Spoofing is when you make a fake or hoax of something, usually maliciously to trick the other party. Phishing is a type of spoofing where you might receive an email that appears to be from your bank but, in fact, it’s tricking you into giving the bad actor some piece of data they need. Phishing (faking an email from an organization or person you may have dealings with) is a form of spoofing. Often, social engineering attacks are forms of spoofing, such as vishing, which is a telephone call from someone pretending to be from your bank to trick you into performing some action. There are also many other types of spoofing, as we will see as we explore each of the cards in the Spoofing suit.

In this chapter, we’ll go through a series of example spoofing threats from the Spoofing suit in the Elevation of Privilege card game. We’ll see a variety of references where you can read more about the threat and we’ll also give you suggestions on how to mitigate...