Baiting is like a real “ Trojan horse .” It uses physical means and relies on the victim’s curiosity or greed. In many ways, it is similar to phishing attacks . However, what sets it apart from other types of social engineering is the promise of an item or object that hackers use to lure their victims. “Baiters” (as these attackers are called) may offer users free music or movie downloads if they give them their login credentials to a certain page.
But these attackers don't limit themselves bosnia and herzegovina whatsapp number data 5 million to using online tactics. They can also focus on exploiting human curiosity using physical means.
Mailfence - Get your free and secure email.
4.1 based on 177 user reviews
Register
How is baiting done?
Let’s take an example: with the ultimate goal of infiltrating a company network, the social engineer distributes malware-infected devices to employees. As a result, they expect this hardware to be inserted into computers connected to the network. This therefore provides them with an opportunity to spread their malicious code. Employees see the infected USB sticks as a reward for participating in a survey.
For example, these seemingly innocent devices could be placed in a gift basket at the company’s reception desk, for employees to simply grab one on their way back to work. Another possibility is strategically placing infected devices for employees to grab. If these have intriguing labels on them, with words like “Confidential” or “Salary Information,” the devices could prove too tempting for some workers. These employees could simply take the bait and insert the infected device into company computers, and voila!
What is the difference between baiting and other social engineering techniques?
The key point of baiting is to tempt the victim to “take the bait”, hence the name (in English, “baiting” literally means “to put bait”). The tempting content could be the promise of a gift, the possibility of receiving some reward. Therefore, the hacker’s job is to create a trap for his victims.