024_Watering Hole Attacks – CompTIA Security+ SY0-701 – 2.2

Front

What is a watering hole attack?

Back

A method where attackers compromise a third-party website frequently visited by employees.

Front

Why do attackers use watering hole attacks instead of direct infiltration?

Back

Employees are well-trained and do not fall for phishing attempts

Front

How do attackers choose websites to target in a watering hole attack?

Back

By identifying websites frequently visited by employees

Front

What happens after an employee visits a compromised website in a watering hole attack?

Back

The website infects the employee's system with malware

Front

What is an example of a watering hole attack?

Back

A sandwich shop website is compromised to infect employees who visit it

Front

What was the target of the 2017 financial sector watering hole attack?

Back

Financial institutions

Front

Which institutions were targeted in the 2017 watering hole attack?

Back

Polish Financial Supervision Authority and banks in Mexico and Uruguay

Front

What was the main method used in the 2017 attack?

Back

Exploiting vulnerabilities in financial institution websites

Front

How did the attackers in 2017 ensure only specific targets were infected?

Back

By inserting malicious JavaScript that targeted specific visitors

Front

What type of malicious code was used in the 2017 attack? Options: Ransomware, Malicious JavaScript, Keyloggers, Trojans

Back

Malicious JavaScript