A watering-hole attack has been discovered to be orchestrated by a cyber-espionage group that targets individuals connected to the military sector; victims are redirected from the website of a major banking institution to defense-related domain names hosting an exploit kit.