024_Watering Hole Attacks – CompTIA Security+ SY0-701 – 2.2

What is a watering hole attack?

• A cyberattack that targets an organization directly

• A method where attackers compromise a third-party website frequently visited by employees

• A technique that involves phishing emails

• A denial-of-service attack on a company’s website

Why do attackers use watering hole attacks instead of direct infiltration?

• Direct attacks are always unsuccessful

• Employees are well-trained and do not fall for phishing attempts

• It allows attackers to test their malware on different systems

• Companies encourage employees to use third-party websites

How do attackers choose websites to target in a watering hole attack?

• By randomly selecting websites

• By identifying websites frequently visited by employees

• By hacking into an organization’s email system

• By attacking government websites only

What happens after an employee visits a compromised website in a watering hole attack?

• The website asks them to enter sensitive information

• The attacker immediately gains access to the company network

• The website infects the employee's system with malware

• The employee receives a fake invoice

What is an example of a watering hole attack?

• An employee receives an email with a fake invoice

• A sandwich shop website is compromised to infect employees who visit it

• A company’s internal server is directly hacked

• A CEO receives a targeted phishing email

What was the target of the 2017 financial sector watering hole attack? (a watering hole attack targeted to Polish Financial Supervision Authority, National Banking and Stock Commission of Mexico, A state-owned bank in Uruguay).

• Healthcare institutions

• Government agencies

• Financial institutions

• Technology startups

Which institutions were targeted in the 2017 watering hole attack?

• European car manufacturers

• Hospitals and pharmaceutical companies

• Polish Financial Supervision Authority and banks in Mexico and Uruguay

• Social media platforms

What was the main method used in the 2017 attack? (a watering hole attack targeted to Polish Financial Supervision Authority, National Banking and Stock Commission of Mexico, A state-owned bank in Uruguay)

• Email phishing

• Exploiting vulnerabilities in financial institution websites

• Sending fake invoices to employees

• Using ransomware

How did the attackers in 2017 ensure only specific targets were infected? (a watering hole attack targeted to Polish Financial Supervision Authority, National Banking and Stock Commission of Mexico, A state-owned bank in Uruguay)

• By inserting malicious JavaScript that targeted specific visitors

• By sending infected email attachments

• By hacking into employee computers directly

• By targeting all visitors to the website

What type of malicious code was used in the 2017 attack? (a watering hole attack targeted to Polish Financial Supervision Authority, National Banking and Stock Commission of Mexico, A state-owned bank in Uruguay)

• Ransomware

• Malicious JavaScript

• Keyloggers

• Trojans