A form of social engineering in which an attacker lures a victim with a false promise that appeals to greed or curiosity. A USB drive carrying a malicious payload and left in a lobby or a parking lot is an example of baiting: the attacker hopes someone's curiosity will lead them to plug the USB drive into a device, at which point the malware it carries can be installed.