In this presentation Monnappa showcased a novel concept in security arena – “Watering Hole Attack”. He presented various exploitation methods around it using the practical video demonstration.
Presentation:
Video Demonstration:
References:
- http://about-threats.trendmicro.com/RelatedThreats.aspx?language=au&name=Watering+Hole+101
- http://www.fireeye.com/blog/technical/cyber-exploits/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html
- http://www.securityweek.com/new-ie-10-zero-day-used-watering-hole-attack-targeting-us-military
- http://blogs.cisco.com/security/watering-hole-attacks-target-energy-sector/
