Watering hole attack

{
  "id": "MLC-T-CYB-004605",
  "term": "Watering hole attack",
  "field": "Cybersecurity",
  "definition": "1. A security exploit where the attacker infects websites that are frequently visited by members of the group being targeted, with a goal of infecting a computer used by one of the targeted group when they visit the infected website.\n\n2. A security exploit where the attacker infects websites that are frequently visited by members of the group being attacked, with a goal of infecting a computer used by one of the targeted group when they visit the infected website.",
  "references": [
    "CNSSI 4009-2022 from NIST SP 800-150 (adapted)",
    "NIST SP 800-150",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/watering-hole-attack/"
}