Attack that lures victims with something enticing, like infected USB drives or too-good-to-be-true offers.
Baiting uses temptation to compromise victims. Physical baiting might involve leaving malware-infected USB drives in parking lots or lobbies, labelled attractively ('Salary Review 2024' or 'Confidential'). Digital baiting offers free downloads, prize winnings, or exclusive content that delivers malware. Baiting exploits curiosity and greed, relying on victims to compromise themselves by taking the bait. Even security-aware users can be tempted by well-crafted bait.
Why It Matters
The DSC Perspective:
Baiting bypasses perimeter security entirely when victims physically bring malware into the building. Policies should prohibit connecting unknown USB devices, and awareness training should cover baiting tactics.