Spring 2022, No. 1, vol. 4 / Romanian Cyber Security Journal

Malicious Strategy: Watering Hole Attacks

Mihai APOSTOL, Bogdan PALINIUC, Rareș MORAR, Florin VIDU,,,

A recent attack strategy named watering hole attack has evolved in the past years, a combination of different techniques which are aimed at companies network by infecting websites which are frequently accesed by its employees. This paper aims to bring a better understanding and awareness of this type of attack. A case study is included in this research and also an analysis of Earth Lusca, a criminal organization whose strategy is concentrated on watering hole attacks.

Watering-Hole, Cross Site Scripting, File Upload, Earth Lusca, Holy Water Attack.

For more details, click on: