Glossary: Threat Vectors: Files, Networks and Endpoints

watering hole

Also written: watering hole attack

An attacker compromises a real website the targets already visit, such as a coffee roasters' association site, and waits. Unlike phishing, no message is sent.