Baiting and Malicious USB Devices

Baiting exploits human curiosity by offering a physical or digital "bait": the classic example is leaving a USB drive abandoned in an office parking lot or reception area, with an eye-catching label such as "confidential" or "payroll", in the hope that someone will plug it into their computer out of curiosity. That device can contain malware that installs automatically when connected, without needing to open any file. There are digital variants, such as offers of free software downloads or pirated content that actually install malicious software. The practical rule is simple: any USB device of unknown origin must not be connected to a personal or corporate computer under any circumstances, and should be handed over to the security or IT area if found on an organization's premises.