Threat intelligence reports that attackers compromised a niche muni…

Question

Threat intelligence reports that attackers compromised a niche municipal-procurement discussion forum that purchasing staff visit weekly, then served malware to visitors. Which threat vector is this?

Accepted Answer

Watering hole — compromising a site the target group already trusts and routinely visits — Poison the watering hole and the herd drinks malware — here, the niche procurement forum staff already trust. Attackers did not need a phone call or a USB candy drop; they waited where the audience already gathers. Treat specialized industry sites as part of the attack surface.

Answer

Vishing that pressures the help desk over a live phone call

Answer

Typosquatting a lookalike domain solely to redirect vendor ACH payments

Answer

Leaving unlabeled USB drives in a city-hall parking lot

Threat intelligence reports that attackers compromised a niche municipal-procurement discussion forum that purchasing staff visit weekly, then served malware to visitors. Which threat vector is this?

Short Explanation

Full Explanation