CURRENT ARTICLES

---

Spring 2022, No. 1, vol. 4 / Romanian Cyber Security Journal

Malicious Strategy: Watering Hole Attacks

Mihai APOSTOL, Bogdan PALINIUC, Rareș MORAR, Florin VIDU

mihai.apostol@ici.ro, bogdan.paliniuc@icisoc.ro, rares.morar@icisoc.ro, florin.vidu@ici.ro

Abstract:
A recent attack strategy named watering hole attack has evolved in the past years, a combination of different techniques which are aimed at companies network by infecting websites which are frequently accesed by its employees. This paper aims to bring a better understanding and awareness of this type of attack. A case study is included in this research and also an analysis of Earth Lusca, a criminal organization whose strategy is concentrated on watering hole attacks.

Keywords:
Watering-Hole, Cross Site Scripting, File Upload, Earth Lusca, Holy Water Attack.

For more details, click on: