An attacker leaves infected USB drives in the parking lot of a target company, hoping employees will plug them into work computers. What type of social engineering is this?

Why C is correct

Baiting uses enticing physical or digital objects to lure victims. USB drives labeled 'Confidential - Employee Salaries' exploit curiosity. Once plugged in, they can install malware, act as HID keyboards (Rubber Ducky), or create reverse shells. Organizations should disable USB autorun and use endpoint protection.