Technique
№ 005 · class: initial access
Watering Hole
Technique of compromising websites that the target group regularly visits.
Term
description · examples · notesTechnique of compromising websites that the target group regularly visits.
Description
The attacker identifies sites via OSINT and injects exploits or redirects.
The victim is infected during regular visits without clicking suspicious links.
It may use drive-by downloads or exploit kits for malware delivery.
Effective against groups with strict email security but free web access.
Examples
- Exploit kit embedded on an industry portal
- Compromised forum visited by employees of the target organization
Notes
- Technique (how it is done), not threat (what happens).
Threats
used by 2Threats that use it. Select one to open its page.
Defenses
countered by 4How it is countered. Select one to open its page.