Watering hole attack

An attack in which the attacker compromises a website that the target group is known to visit, such as an industry association, supplier portal or community site, and uses it to infect visitors' computers. Because the site is trusted, users have little reason for suspicion. Keep browsers and plugins patched, run EDR on endpoints, and act on reports that a sector website has been compromised.

Further reading: csrc.nist.gov

All terms