News and Analysis

An advanced persistent threat (APT) is a targeted cyber attack where an intruder gains access to a network and remains undetected for an extended period. APTs are initiated to steal highly sensitive data and are typically orchestrated by well-funded nation-state cybercriminal groups. Techniques used include spear phishing, zero-day exploits, watering hole attacks, supply chain attacks, credential theft, command-and-control servers, and evasion strategies. The sequential approach involves gaining access, establishing a foothold, covering tracks, gaining higher access, moving laterally, staging the attack, taking the data, and remaining undetected.