Watering-Hole
Watering Hole Attack — Targeting Victims Through Trusted Websites
A watering hole attack is a targeted strategy where attackers compromise a website frequently visited by a specific group and use it to deliver exploits or malware. This SECMONS glossary entry explains how watering hole attacks work, how they differ from mass exploit kits, and how defenders can detect and mitigate them.
Watering Hole Attack Technique — Targeted Compromise of Websites Used by Victims
Technical explanation of watering hole attacks, a technique in which threat actors compromise websites frequently visited by a target group in order to infect visitors with malware.