A watering hole attack, also called a waterholing attack, is an advanced form of attack in which a malicious actor compromises a third-party resource that a target organization either currently uses^[0] or is likely to use.^[1][2] This third-party resource could be a website^[1][3][4], a software download page, or other digital asset. The goal of the attacker is to infect the target organization with malware or malicious code, by luring individuals within the organization to the compromised third-party resource where they can be targeted with malicious content.

Watering Hole Attack Synonyms

• Waterholing Attack^[2]
• Water Holing attack^[2]

---

Share this article