Community QuestionSeen on 11 CBTs

Watering hole attack

Community-sourced. Answers may be wrong or out of date. Always verify with your official training portal before submitting. Not affiliated with any branch, agency, or vendor. Details.
Answer

security exploit in which the attacker seeks to compromise a specific group of end users by infecting websites that members of the group are known to visit. The goal is to infect a targeted user's computer and gain access to the network at the target's place of employment.

Alternate answers seen on other CBTs

The same question shows up worded slightly differently across CBT versions. Here are the other answer variants we've indexed.

is a directed social engineering attack. It relies on the circumstance that a group of targets may use an unsecure third party website.

Comptia Certmaster Practice For Security+

Security exploit in which the attacker seeks to compromise a specific group of end-users by infecting websites that members of the group are known to visit. The goal is to infect a targeted user's computer and gain access to the network at the target's place of employment.

Comptia Sec Plus Objectives