A compromised municipal parks-events WordPress page drops a loader on a staff browser. What delivery vector is this?
Select an answer to reveal the explanation.
Short Explanation
Staff went to the city's own parks calendar and the page handed them a loader. When the trusted civic site is the trap, that is a watering hole. Nobody needed a USB or a VPN spray for this one.
Full Explanation
A drive-by from a compromised municipal website that staff already trust is a watering-hole delivery vector. USB bait, VPN brute-force, and OT jump-host dual-homing are different introduction paths. The analyst should treat the parks-events page as the trusted site that delivered the loader.