A company has identified a watering hole attack. Which of the following Best describes this type of
attack?
A.
Emails are being spoofed to look like they are internal emails
B.
A cloud storage site is attempting to harvest user IDS and passwords
C.
An online news site is hosting ads in iframes from another site
D.
A local restaurant chains online menu is hosting malicious code
Explanation:
This should be D, iframes are not malicious,
Watering hole is a computer attack strategy, in which the victim is a particular group (organization, industry, or region). In this attack, the attacker guesses or observes which websites the group often uses and infects one or more of them with malware. Eventually, some member of the targeted group gets infected.
1
0
iframes can be malicious.
http://whatis.techtarget.com/definition/IFrame-Inline-Frame
0
0
My first thought was C but now I am leaning towards D.
iframes can be made into malicious elements but just going to a website that has ads in iframes is not a watering hole attack. It is an attractive place to put a watering hole attack in place but not necessarily a watering hole attack.
Online menu with malicious code–here we have a real attack not just a place to gather.
1
0