watering hole attack

A computer attack strategy, in which the victim is a particular group (organization, industry, or region), and the attacker guesses or observes which websites the group often uses and infects one or more of them with malware.