[Handling and Responding to Malware Incidents] An attacker traced out and found the kind of websites a target company/individual is frequently…

The described attack is a "Watering hole" attack. This type of attack targets specific groups of users

by infecting websites they are known to frequently visit. The attacker first identifies websites that are

popular with the target group, then finds vulnerabilities in those websites to inject malicious code.

When the victims visit the compromised site, the code redirects them to other sites or automatically

downloads malware onto their machines. This attack leverages the trust users have in regularly

visited sites to distribute malware. Unlike obfuscation application, directory traversal, or

cookie/session poisoning attacks, watering hole attacks specifically aim to compromise a commonly

used and trusted website to target its users.

Reference:The ECIH v3 certification materials discuss various cyber attack strategies, including

watering hole attacks, and provide insights into how attackers exploit trusted relationships between

websites and their users.