Email spoofing is the creation of
email messages with a forged sender address. It is easy to do because the core protocols do not have any mechanism for
authentication. It can be accomplished from within a
LAN or from an external environment using
Trojan horses.
Spam and
phishing emails typically use such spoofing to mislead the recipient about the origin of the message.