Baiting Attack:

A type of social engineering attack that tricks victims by offering something enticing – such as free products, software, or media – to lure them into taking harmful action. Baiting can occur through email, malicious websites, or even physical devices like infected USB drives left in public places.

The attacker’s goal may be to profit financially, steal sensitive information (usernames, passwords, or intellectual property), or gain access to a secure network to exploit additional vulnerabilities. In some cases, the stolen personal information is used to impersonate the victim and commit fraud.

Related term: Social Engineering