From the course: ISC2 Systems Security Certified Practitioner (SSCP) (2024) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Watering hole attacks

Watering hole attacks

From the course: ISC2 Systems Security Certified Practitioner (SSCP) (2024) Cert Prep

Start my 1-month free trial Buy for my team

Watering hole attacks

“

- [Instructor] Watering hole attacks use sneaky techniques to lure unsuspecting users and infect their systems with malware. In nature, a watering hole is a place that animals gather, particularly in dry climates. It's important that animals visit the watering hole because the water there is essential to their survival, but there are also significant risks involved. First, diseases can spread easily at watering holes because all of the animals drink from a common source. Second, predators can lay and wait at the watering hole, waiting for prey to show up in need of a drink, and then attack. In the electronic world, websites are great watering holes where you can spread malware. When a user visits a website, they trust that website to some extent. It's the digital equivalent of approaching someone you trust, as opposed to being solicited by an unknown stranger. Web browsers, as well as browser add-ins and extensions,…

Contents