In a USB drop key attack discussion, which technique is NOT a common way attackers disguise malicious files to entice users to run them?

• A. Embedding the malware in a document within an encrypted email attachment
• B. Mislabeling the drive as a legitimate company tool
• C. Using a familiar brand logo on the drive
• D. Hiding the drive in a common USB charging station

Answer: (A)

In USB drop key attacks, the attacker relies on physical lure and social engineering to persuade a user to connect and run the content from the device. The device itself is crafted to look legitimate or naturally useful, prompting curiosity or trust at the moment of interaction. Embedding the malware in a document within an encrypted email attachment is not about the physical lure of a USB drive; it’s a phishing tactic that targets email channels rather than the USB drop key vector. The other techniques—mislabeling the drive as a legitimate company tool, using a familiar brand logo on the drive, and hiding the drive in a common USB charging station—are classic ways to boost credibility and entice a user to engage with the device in person. So the option involving an encrypted email attachment is not a common USB drop key disguise.