An employee reported seeing an individual outside the office drop a few thumb drives. The employee grabbed those devices and brought them to the information technology $($IT$)$ department. After conducting forensics on the devices using air$-$gapped machines, the IT team determined that the individual was trying to trick employees into plugging the devices into their computers to steal information. What was the malicious actor attempting on an unsuspecting employee?

The actor used an email lure.

The actor tried to improve the company's security posture.

The actor used a physical lure.

The actor was not being malicious.