Email spoofing typically involves the manipulation of email headers to make it appear as though the email is from a legitimate source. Attackers may use a technique called phishing to lure recipients into clicking on malicious links or providing personal information. These emails often mimic the format, language, and branding of trusted entities.