waterholing attacks have been the major vector in
attacks on multi-national corporations alongside spearphishing.
Instead of directly targeting employees with
customized phishing messages, the attackers target websites
that are likely to be visited by their victims. They infect specific
websites with malware and expect that some of their
target companies' employees will visit them.