update definition of social.baiting

[gdbassett]

Baiting definition currently only refers to planting infected media. Should it be updated to include any situation where the attacker waits somewhere where victims comes to them. This would including leaving media in parking lots to be picked up, malicious links on SEO websites, and waterhole attacks. This would be in contrast to phishing (where the attacker reaches out to the victim).

[gdbassett]

"prepare malicious content in a location where a victim is likely to interact with it. (e.g. SEO - vect: websites, left usbs- vect: removable media, etc)"