Email forging is the practice of making an email appear as if it was sent from a different source. This is usually for malicious purposes, such as phishing or spreading misinformation. While this article serves as an educational resource aimed at promoting cybersecurity awareness and understanding, please note that forging emails is illegal and can have serious consequences. With that being said, here are 10 steps on how email forgery is done:

1. Choose a target: Identify the person or persons you would be impersonating or impersonating to.

2. Gather information: Collect key details about your target, such as their email address, name, and position.

3. Choose an SMTP server: Simple Mail Transfer Protocol (SMTP) servers are essential for sending emails. Find one that allows you to forge email headers without authentication.

4. Create a forged header: An SMTP server needs certain details to route an email correctly. Craft a header with the following information – ‘FROM’, ‘TO’, ‘SUBJECT’, ‘DATE’, and ‘MIME-Version’. Make sure to include your target’s details.

5. Spoof the ‘FROM’ address: Replace the actual sender’s email address with the one you want it to appear from. This makes it look like the email is coming from your target.

6. Compose the body: Draft an email body that maintains the tone and style of your target while addressing a specific purpose for your forgery – gaining trust or eliciting sensitive information.

7. Attach malicious files (optional): This step isn’t always necessary but may be part of a phishing attack or malware distribution campaign.

8. Send the forged email: Once you’ve constructed your fake email with header and body, use a mail client or server to send it off.

9. Monitor activity: If partaking in malicious activities, attackers keep an eye on their fake email’s progress – which accounts are responding or clicking on attachments.

10. Clean up tracks: Since forging emails is illegal, attackers often employ techniques to delete or obfuscate their digital trails.

This article is meant to demonstrate how email forging can occur, making it critical for users to be mindful of suspicious emails and adopt personal cybersecurity best practices. Ensure you verify email senders before engaging with unfamiliar content and report any suspicious emails to your IT department or email service provider.