Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool.

Source: https://threatpost.com/watering-hole-attacks-push-scanbox-keylogger/180490/