1

If the website is legitimate and the attacker exploited that legitimate website, and the attacker gains access to a victim's system that visits the website, then it is a drive-by compromise.

However, if the attacker built the website, and the attacker gains access to a victim's system that visits the website, will it be called a drive-by compromise?

Definition of drive-by compromise

1
  • 1
    No, what you are describing is called phishing. Commented Jun 30, 2021 at 14:22

1 Answer 1

1

Both are types of Drive-By Compromise. It doesn't matter who owns the site. What matters is that the client is compromised by simply processing the malicious code delivered by the site.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .