WAV: Watering-hole attack, VCS: Vulnerable Client Server