Watering Hole Attack is a attack_type tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed January 23, 2026; most recent activity January 23, 2026.
In late December 2025, EmEditor, a widely used text and code editor, reported that its download page had been compromised. This incident involved a watering hole attack that aimed to distribute multistage malware…