Guest
Guest
Dec 11, 2021
4:56 AM
|
Hackers are becoming more creative with their illicit activities. This means that computer users have to take precautions to ensure their computers are safe. Learn more about cyberattacks to stay ahead of the game. These are tips to help you combat one-way criminals who steal data: Watering hole attacks. These types of attacks are carried out by hackers who create fake websites that contain malware. These websites look like legitimate websites employees would visit. These spoofed websites force victims to enter usernames and passwords, or download malware to compromise their computers. Companies with high-security email accounts and Internet access are more vulnerable to watering holes attacks. This makes phishing difficult. webroot.com/safe
Watering holes (also known to be strategic website compromise attacks or watering holes) are used to compromise a targeted group of users (often employees at large companies) in a specific industry via popular websites. Infecting a user's computer using malicious code is the primary goal to gain access to the network at their place of employment.
Watering Hole attacks are a way for an attacker to target a particular group of users. This can be done by either creating new websites to attract them or infecting sites they already visit. These attacks have been used by criminals, APT group, and nation-states alike and the numbers are increasing. In order to steal username and password combinations in the hope that the victim will reuse them, or infect victim's computers and gain access the network at the victim's workplace, the goal is to either take the username and password combinations and then to steal the victim's login and password. These attacks, while similar to Spear Phishing, are often viewed as an alternative. Watering Hole attacks can still be targeted attacks but cast a wider net to trap more victims than their original goal. Watering holes are targeted attacks that target users in a particular industry or group of users. They attack websites they frequent and lure them to malicious sites. The ultimate goal is to infect users computers and gain access to the organization's network. Watering Hole attacks (also known as strategic website compromise attacks) are very limited in their scope because they depend on luck. However, they are more effective when combined with email prompts to lure people to websites. webroot.com/safe
|
