Watering Hole Attacks

What is a watering hole attack?

• A type of attack where attackers directly target an organization's network

• A type of attack where attackers infect a third-party website to target users of a specific organization

• A type of attack where attackers send malicious emails to users

• A type of attack where attackers physically break into an organization's premises

How do attackers change their strategy in response to high-level security in an organization?

• They try to physically break into the organization's premises

• They try to infect a local sandwich shop

• They give up and move on to another target

• They focus on infecting a third-party website to target the organization's users

What is the purpose of a watering hole attack?

• To steal physical assets from an organization

• To physically harm the employees of an organization

• To infect a third-party website and gain access to an organization's network

• To directly target users of a specific organization with malicious emails

How do attackers try to find vulnerabilities in a third-party site for a watering hole attack?

• By physically breaking into the site's premises

• By guessing which sites the organization's users visit

• By sending malicious emails to the site's visitors

• By using a next-generation firewall to scan the site

What type of sites were targeted in the example of a watering hole attack in 2017?

• Healthcare organizations

• Educational institutions

• Government agencies

• Financial institutions

What was the payload of the watering hole attack on the financial sites in 2017?

• Sending malicious emails to all visitors of the site

• Physically harming the visitors of the site

• Downloading malicious JavaScript files to all visitors of the site

• Downloading malicious JavaScript files only to visitors from specific IP addresses

How did Symantec's antivirus software help prevent the watering hole attack on the Polish Financial Supervision Authority site?

• It allowed the attackers to access the site but monitored their activities

• It physically blocked the attackers from accessing the site

• It alerted on a generic JavaScript attack signature and blocked the malicious JavaScript

• It sent warnings to the visitors of the site

What is one way to prevent a watering hole attack?

• Using only one type of security defense

• Having a layered defense or defense in depth

• Giving outside organizations more access than they should have

• Allowing users to click on links inside emails

What is the main goal of a watering hole attack?

• To directly target users of a specific organization with malicious emails

• To physically harm the employees of an organization

• To steal physical assets from an organization

• To infect a third-party website and gain access to an organization's network