Which tactic involves offering something enticing in exchange for important information such as login credentials?

Which tactic involves offering something enticing in exchange for important information such as login credentials?

• A. Diversion Theft
• B. Piggybacking
• C. Baiting
• D. Tailgating

Answer: (C)

Baiting hinges on a lure to tempt someone into revealing credentials or taking an action that compromises security. The attacker offers something desirable—a free gift, access, or a tempting reward—and expects the target to respond by disclosing login details or enabling a device or link that grants access. This can be a physical lure, like a dropped USB drive labeled with something enticing, or a digital one, such as a fake prize or free download that directs the user to a spoofed login page. The trap works because it taps into human curiosity or greed, lower-than-usual scrutiny, and the desire to gain something valuable. To defend against baiting, stay skeptical of unsolicited offers, verify legitimate sources before interacting with any link or device, never plug in unknown hardware, and use strong authentication methods to reduce the impact if credentials are inadvertently exposed.

Baiting hinges on a lure to tempt someone into revealing credentials or taking an action that compromises security. The attacker offers something desirable—a free gift, access, or a tempting reward—and expects the target to respond by disclosing login details or enabling a device or link that grants access. This can be a physical lure, like a dropped USB drive labeled with something enticing, or a digital one, such as a fake prize or free download that directs the user to a spoofed login page. The trap works because it taps into human curiosity or greed, lower-than-usual scrutiny, and the desire to gain something valuable.

To defend against baiting, stay skeptical of unsolicited offers, verify legitimate sources before interacting with any link or device, never plug in unknown hardware, and use strong authentication methods to reduce the impact if credentials are inadvertently exposed.