Technique
technique:watering_hole_attack
Also: watering hole
Technique in which attackers compromise a website frequented by intended victims and place malware on it.
Technique in which attackers compromise a website frequented by intended victims and place malware on it.
“they used what’s known as a watering-hole attack.”
“This would hack into a popular website, put malware on it, and wait for users to visit the site”
Attack in which visiting a compromised website attempts to infect visitors with exploits.
“it was a watering hole attack, where a watering hole attack is if you go to a website and it is just going to try to infect anyone who goes to this website”
Elderwood USES watering-hole attack
After Operation Aurora, Elderwood changed its initial-entry tactic to watering-hole attacks.
Attributed Confidence 95% · Jack Rhysider EP 19 Details
“Instead of getting people to click the phishing e-mail they used what’s known as a watering-hole attack”