Which of the following would most likely be used by attackers to perform credential harvesting?

Social engineering is the most likely method for credential harvesting because it manipulates individuals into divulging sensitive information, such as usernames and passwords. Attackers use tactics like phishing, pretexting, or baiting to trick users into providing their credentials directly or entering them into fake login pages. Supply chain compromise involves tampering with products or services during their development or distribution, which is less direct for harvesting credentials from end-users. Third-party software could be exploited, but the initial compromise often involves social engineering to install it or gain access. A rainbow table is used for cracking hashed passwords, not for harvesting them directly from users.