APT (Advanced Persistent Threat)

An APT is a type of attack in which a threat actor, typically a nation-state or highly organized criminal group, gains unauthorized access to a network and remains undetected for an extended period of time. Unlike opportunistic attacks, APTs are targeted and methodical, with attackers carefully avoiding detection while achieving their objectives: espionage, data exfiltration, or sabotage. APTs are characterized by long dwell times, use of legitimate tools, and multiple stages of attack.