Watering Hole Attacks

Chances are you have some trusted industry sites for staying up to date with the news you care about. Just like you Finance, HR and most every department also has sites that they rely on to help them do their jobs as well.

Some hackers are now taking advantage of these poplar sites. First, they observe which sites attract a specific type of user.

Then they compromise that site to spread malware or steal information.

This makes the attackers able to get large amounts of data from across many organizations al once.

Users are fairly trusting of these sites - since they have been useful resources in the past.

While much of the protection relies on sites policing themselves, you should be on the lookout for a site suddenly requesting information or permissions that is has not done in the past.

You should also make sure your browser is up to date and patches to make these types of attack less likely.