During a penetration testing exercise, a team decides to use a watering hole strategy. Which of the following is the most effective approach for executing this attack?

Question

Options

• ACompromise a website frequently visited by the organization's employees.
• BLaunch a DDoS attack on the organization's website.
• CCreate fake social media profiles to befriend employees.
• DSend phishing emails to the organization's employees.

• A
  89% (31)
• B
  3% (1)
• C
  6% (2)
• D
  3% (1)

Explanation

Watering Hole Attack Explained

A watering hole attack mirrors how predators wait at a watering hole for prey - attackers identify and compromise a third-party website that target employees regularly visit (e.g., industry forums, news sites, or local restaurants), embedding malicious code that executes when victims browse there, making Option A the correct answer.

• Option B (DDoS) is a denial-of-service technique focused on disrupting availability, not gaining unauthorized access or compromising users - it's a different attack category entirely.
• Option C (fake social media profiles) describes a social engineering/pretexting technique, not a watering hole strategy.
• Option D (phishing emails) is a direct attack to the target, whereas watering hole attacks work indirectly by intercepting victims on trusted external sites.

Memory Tip: Think of a lion waiting at a watering hole - the attacker doesn't chase the prey (no phishing or direct contact); instead, they poison a place the victim already trusts and visits, then wait for them to come to it.

No community discussion yet for this question.