A financial services company notices that several employees' workstations were compromised after visiting a legitimate industry news website they routinely browse. Investigation reveals the attacker had previously compromised that trusted third-party website and injected malicious code that served an exploit kit only to visitors coming from the company's IP range. Which type of attack does this scenario best describe?