Editing Social engineering (security) (section)

=== 2013 Department of Labor watering hole attack ===
In 2013, a [[United States Department of Labor|U.S. Department of Labor]] server was hacked and used to host malware and redirect some visitors to a site using a zero-day [[Internet Explorer]] exploit to install a remote access trojan called [[PoisonIvy (trojan)|Poison Ivy]]. Watering hole attacks were used, with the attackers creating pages related to toxic nuclear substances overseen by the [[United States Department of Energy|Department of Energy]]. The targets were likely DoL and DOE employees with access to sensitive nuclear data.<ref name=":2" /><ref>{{Cite web |date=2013-05-06 |title=Internet Explorer zero-day blamed for Department of Labor website attack |url=https://www.infosecurity-magazine.com/news/internet-explorer-zero-day-blamed-for-department/ |access-date=2025-04-10 |website=Infosecurity Magazine |language=en-gb}}</ref>