watering hole attack
noun
An attack in which an attacker compromises sites commonly visited by members of a targeted community and uses those compromised sites to infect visitors with malware.