My guess is that the watering hole websites were probably browsed by minorities frowned upon by the Chinese state. The Volexity blog covers some of the earlier

My guess is that the watering hole websites were probably browsed by minorities frowned upon by the Chinese state. The Volexity blog covers some of the earlier watering hole attacks in more detail.