Types of Spoofing Attacks

In spring 2024 the FBI warned of a months‑long spear‑phishing campaign by state‑sponsored North Korean actors that bypassed DMARC protections to send spoofed emails targeting experts in academia, research, think tanks, and journalism; the report explains multiple spoofing techniques (email, domain, DNS, IP, ARP, SMS, caller ID, GPS), the relationship between spoofing and phishing as a precursor to social engineering, and recommends mitigations including security awareness training, MFA, email security tools, network defenses, and 24×7 monitoring.