SX Meetup 1 – Watering Hole Attacks Case Study and Analysis

In this presentation Monnappa showcased a novel concept in security arena – “Watering Hole Attack”. He presented various exploitation methods around it using the practical video demonstration.

Presentation:

Video Demonstration:

References:

• žhttp://about-threats.trendmicro.com/RelatedThreats.aspx?language=au&name=Watering+Hole+101
• http://www.fireeye.com/blog/technical/cyber-exploits/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html
• http://www.securityweek.com/new-ie-10-zero-day-used-watering-hole-attack-targeting-us-military
• žhttp://blogs.cisco.com/security/watering-hole-attacks-target-energy-sector/