Today’s SY0-701 CompTIA Security+ Pop Quiz: It’s in the contract

An attacker is gaining access to third-party networks using malware posted on a governmental reporting website used by the third-parties. Which of the following would BEST describe this attack type?