Baiting uses temptation (USB drives, emails) to compromise security.
Research studies have repeatedly shown that people plug in USB drives they find in parking lots. The more enticing the label — "Salary List 2026," "Confidential," "Employee Bonuses" — the more likely someone is to plug it in. Curiosity and the feeling of stumbling onto something valuable override caution.
Digital baiting follows the same principle: free software that seems too useful to be free, pirated games or films from torrent sites, fake browser extensions promising features your current browser lacks. These are designed to look like a windfall while delivering malware.
Tailgating exploits social norms. Nobody wants to let a door close in someone's face, especially if they are carrying boxes or look like they belong. Attackers dress appropriately, carry props, and time their approach to coincide with an authorized employee's entry.
Physical security matters as much as digital security. An attacker inside your building can plug in a device, photograph a whiteboard, access an unlocked workstation, or walk out with hardware. Digital defenses cannot compensate for a breached physical perimeter.