Question $6$

Scenario:

A well$-$known technology company, TechSecure, has recently experienced a significant security breach. The breach was traced back

to a "watering hole attack" that targeted a popular industry$-$specific forum frequently visited by TechSecure employees. The threat

actors compromised the forum and used it to deliver malware to the employees' devices, ultimately gaining access to the

company's internal network.

Questions:

$($a$)$ Describe the characteristics of a watering hole attack and explain why threat actors might choose this method over other types

of attacks.

$($b$)$ Identify potential target$($s$)$ in the context of the TechSecure scenario and discuss the implications such an attack could have on

both the organization and its users depending on which targets are compromised.

$($c$)$ Briefly formulate preventive measures that TechSecure could implement to mitigate the risk of future watering hole attacks.