Which term describes an attack where an attacker compromises websites frequented by a target group to deliver malware?

Which term describes an attack where an attacker compromises websites frequented by a target group to deliver malware?

• A. Watering hole attack
• B. Typosquatting
• C. Vishing
• D. Pharming

Answer: (A)

Watering hole attacks exploit trust in websites frequented by a target group. An attacker identifies sites commonly visited by the group and compromises one or more of those sites. When members of the group visit the site, they are exposed to malware through drive-by downloads or hidden exploits, often without any action beyond loading the page. This approach relies on the site's legitimacy to silently deliver malware, rather than tricking users into visiting a fake site. It differs from typosquatting (creating a misspelled domain to lure users to a fraudulent site), vishing (phone-based social engineering), and pharming (redirecting users to a malicious site via DNS or host file manipulation).

Watering hole attacks exploit trust in websites frequented by a target group. An attacker identifies sites commonly visited by the group and compromises one or more of those sites. When members of the group visit the site, they are exposed to malware through drive-by downloads or hidden exploits, often without any action beyond loading the page. This approach relies on the site's legitimacy to silently deliver malware, rather than tricking users into visiting a fake site. It differs from typosquatting (creating a misspelled domain to lure users to a fraudulent site), vishing (phone-based social engineering), and pharming (redirecting users to a malicious site via DNS or host file manipulation).