Please let me present you with a hypothetical scenario. A journalist is targeted by hackers. Said journalist is very careful with email attachments and will not click on them. However, surfing the web is full of risks. I have two questions that maybe you could answer?
- The hackers know that their victim is into, say, tennis and that he or she may visit tennis blogs and forums. How easy would it be to inject, say, hundreds of tennis-themed websites with malware AND then identify their victim among thousands of visitors/clicks?
- The more general question is what percentage of mainstream websites can actually be injected with malware. How easy is it to just plant a virus wherever you want? By mainstream websites, I mean top results on Google or Bing.