watering hole attack

(computing) A computer attack strategy, in which the victim is a particular group (organization, industry, or region), and the attacker guesses or observes which websites the group often uses and infects one or more of them with malware.