In the context of information security, a spoofing attack is a situation in which a person or program successfully identifies as another by falsifying data, to gain an illegitimate advantage.
Note
An attacker steals the authentication token of a legitimate user and uses it to impersonate the user.