Watering Hole Attacks - A Brief Overview

Watering hole attacks, a concept derived from the intrusion kill chain model, involve compromising websites frequented by a targeted community to deliver malicious payloads. Coined by the RSA Advanced Threat Intelligence team in 2012, these attacks mimic predators waiting at watering holes for prey. Lucky Mouse's 2019 attack on the International Civil Aviation Organization exemplifies this method's efficacy, compromising servers and accounts through the website. These attacks have become prevalent in cybersecurity campaigns.