An employee reports finding several unlabeled USB flash drives scattered in the company parking lot. Curious, one worker plugged a drive into their workstation, which then began installing an unknown application. The security team confirms the drives were deliberately placed by an outside party hoping employees would connect them. Which type of attack does this scenario BEST describe?