Domain spoofing involves cyber criminals impersonating a business or its employees to add a sense of legitimacy to their attack campaigns.