Which of the following Best describes this type of attack?

A company has identified a watering hole attack. Which of the following Best describes this type of attack?

A.
Emails are being spoofed to look like they are internal emails

B.
A cloud storage site is attempting to harvest user IDS and passwords

C.
An online news site is hosting ads in iframes from another site

D.
A local restaurant chains online menu is hosting malicious code