Watering hole attack

Watering hole attack – This is an attack orchestrated through websites containing malicious code. It is an attack performed by introducing malicious code on a web site that is believed to be frequently visited by personnel of a target organization, much like animals will visit a common watering hole to quench their thirst and targeted by preys.

Protection against watering hole attack may include:

• The primary method to prevent watering hole attach is to deploy centralized web filtering system that blocks access to known malicious websites.
• Installing latest anti-malware solutions and malware analysis procedures helps to thwart watering hole attack.
• Another usual method would be to conduct web security awareness raising sessions.