Introduction Researchers have identified a watering hole attack campaign that leverages a JavaScript-based reconnaissance tool known as ScanBox. This campaign is believed to be orchestrated by APT TA423, a threat actor group. The primary objective of this attack is to plant the ScanBox tool on victim systems, enabling further reconnaissance and potential exploitation. In-Depth Analysis…