Exploit Delivery

Conventional exploit delivery methods in drive-by attacks are not restricted to zero-day exploits. Attackers often leverage both custom and readily-available exploits to compromise victim systems.

In an alternate scenario, imagine an attacker with the intent to compromise a research institute specializing in aerospace technology. This attacker exploits vulnerabilities not only in web browsers and associated software but also in specialized engineering tools commonly used by the aerospace researchers.

For instance, they identify a vulnerability in a widely used simulation software package employed for aircraft design and analysis. This software is an integral part of the institute's research endeavors. The attacker then proceeds to execute a drive-by attack by injecting malicious code into a compromised aerospace engineering website.

The malicious payload takes advantage of the identified software vulnerability, ultimately leading to unauthorized access to the institute's sensitive aerospace data and research findings. This targeted approach, which doesn't rely solely on browser vulnerabilities, enhances the attacker's ability to compromise the critical systems of the aerospace research institute.

It's important to note that these exploits need not be limited to zero-day attacks. Attackers are known to employ any accessible exploit, whether it's a commercially available off-the-shelf solution or one they've customized themselves. The primary objective remains the same: to capitalize on vulnerabilities present on the client device.

In a different example, consider an attacker targeting a research institution specializing in renewable energy. They may exploit vulnerabilities in commonly used software associated with the institution's work, such as specialized simulation software used for solar panel efficiency analysis. The attacker can deliver a malicious payload through a compromised website or watering hole attack, taking advantage of any available exploits, be they zero-day or known vulnerabilities. This targeted approach enhances the attacker's chances of compromising the institution's critical systems.