A security analyst investigates a breach at an engineering firm. Several employees were infected with malware after visiting a legitimate industry forum they frequently use for professional research. The forum itself was compromised to serve malicious code only to visitors from the firm's IP range. Which threat vector best describes this attack?