So I read this article about how the US Department of Labor's website was compromised and users were redirect to a site that installed malware:
http://threatpost.com/watering-hole-attack-claims-us-department-of-labor-website/
Now, I have two questions:
How could the JavaScript that redirected the users be injected into the DOL's site in the first place?
What technology was used the exploit the memory vulnerability in Internet Explorer (i.e. JavaScript, JAVA, Flash, etc)?
I'm asking so that I can prevent my own websites from being compromised in the same way.