Title: Baiting - Anti-phishing Solution and Security Awareness Training - Keepnet Labs
Headings: 
Baiting
1. What is Baiting?
2. Baiting Psychology
3. Baiting Techniques
Baiting Techniques
4. Baiting: A Case Study
5. Techniques to Prevent Baiting
Techniques to Prevent Baiting
6. Cyber Security Awareness Training / Information Security Awareness Training against Baiting
7. Simulated Phishing Tests / Phishing Simulation Against Baiting
See our other cyber security blogs below:
The Future of Cyber Crime
Data Breaches in 2019
Best Practices Against Email Attacks
Rethinking Anti-phishing Solutions
Two-Factor Authentication Phishing Scam
Bot Malware Attacking Financial Mobile Applications
Social Engineering
2020 Email Security Trends and Challenges Organisations Need to Know
Badge Surfer Attack – Physical Security – SAUDI ARAMCO BREACH
Antivirus Tools Can’t Stop Phishing Attacks
Cybersecurity Awareness Training for Employees
ELECTRONIC VOTE MACHINE HACKING – HOW IT REALLY HAPPENED: NINJIO SEASON 1, EPISODE 11,
Keep Your Institution Safe with A Phishing Simulation Software!
2020 Phishing Trends Report
Working in a Coronavirus World: Best Remote Working Strategies
What Are Insider Threats and How Can You Mitigate Them?
Phishing Attacks with Legitimate URLs
Whaling Attacks are on the Rise
Using Real Brands in Phishing Simulations
Top Spear Phishing Threats and Trends
Social Media Phishing
KEEPNET NINJIO is a cybersecurity awareness solution that uses engaging, 3 to 4 minute Hollywood style micro-learning videos to train employees and organizations to become defenders against cyber threats. KEEPNET NINJIO educates organizations, employees, and families against cyberattacks, making them the first line of defense against today’s advanced attacks. Try for free.

Content: It is an information security confidence trick with the malicious aim for the victim to give away highly confidential and personal information. This is then used to form the basis for various methods of cyber crime and gain access to personal and organisation’s networks. 3. Baiting Techniques
Baiting can take on many digital forms including physical devices such as a USB drive as well as online methods offering too good to be true downloads and attachments which turn out to be the opposite – highly damaging and malicious. At the heart of the reason for the ‘bait’ is to prey on the human foibles and weaknesses of fear, anxiety, curiosity, trust and greed. With the malware-infected USB drive, the cyber criminal will go to an open, public area such as the reception lobby of the targeted organization/company or if they can gain access to the offices, a break-out, communal space such as co-working areas, coffee bars, restrooms, shelves in busy corridors (or perhaps even a desk itself) to plant several USB devices branded with a corporate logo or similar and reassuring trusted sticker such as HR or Finance. They then wait for a curious, intrigued employee to have his curiosity piqued and pick it up, take it into the building and install on their computer. Baiting Techniques
Once installed, the victim will see a list of files and folders with relevant business terms relating to their business, organization or sector. The file may be called ‘Q3 Profit and Loss Projection’ or a folder with the title ‘HR Information – CONFIDENTIAL’ or ‘Banking Inside Information’. Each file and folder will be engineered and designed to elicit the desired response the hacker wants them to take – that is to download the malicious attachment (s) (the ‘bait’) and deliver the malicious ‘trojan-horse’ software to the computer which will then spread out into the internal network and then allows the cyber criminal to move on to the next stage of their attack such as one which involves spear-phishing, watering hole or another method of social engineering.