A Watering Hole Attack targets which of the following by compromising a site frequently visited by the intended victims?

A Watering Hole Attack targets which of the following by compromising a site frequently visited by the intended victims?

• A. Watering Hole Attack
• B. Drive-By Download
• C. Spear Phishing
• D. Man-in-the-middle

Answer: (A)

Watering hole attacks exploit websites that the target is known to visit, compromising that site so malware is delivered when the victims browse it. By choosing a site trusted by the intended victims, the attacker increases the likelihood that the payload will reach the right people and go unnoticed, since users expect legitimate content on familiar sites. This is a targeted form of drive-by infection, aimed at a specific group rather than broad, indiscriminate malware delivery. Spear phishing relies on convincing victims through targeted messages rather than altering a website they visit. Man-in-the-middle involves intercepting or altering communications between two parties, not infecting visitors through a compromised site. Drive-by download describes the act of automatically downloading malware when visiting a compromised site, but watering hole specifically centers on selecting a site frequented by the targeted individuals to maximize impact.

Watering hole attacks exploit websites that the target is known to visit, compromising that site so malware is delivered when the victims browse it. By choosing a site trusted by the intended victims, the attacker increases the likelihood that the payload will reach the right people and go unnoticed, since users expect legitimate content on familiar sites. This is a targeted form of drive-by infection, aimed at a specific group rather than broad, indiscriminate malware delivery.

Spear phishing relies on convincing victims through targeted messages rather than altering a website they visit. Man-in-the-middle involves intercepting or altering communications between two parties, not infecting visitors through a compromised site. Drive-by download describes the act of automatically downloading malware when visiting a compromised site, but watering hole specifically centers on selecting a site frequented by the targeted individuals to maximize impact.