Sophisticated, prolonged cyber attack campaigns typically conducted by well-resourced nation-states or organised groups.
An Advanced Persistent Threat (APT) is a sophisticated, prolonged cyber attack campaign by well-resourced adversaries—typically nation-states or organised criminal groups. APTs target specific organisations for espionage, sabotage, or theft, using advanced techniques and maintaining long-term access. Unlike opportunistic attacks, APTs are targeted, patient, and adaptive. They employ multiple attack vectors, custom malware, and extensive reconnaissance. APT groups are often named (APT29, Lazarus Group) and tracked by security researchers.
Why It Matters
The DSC Perspective:
APTs represent the highest tier of threat sophistication. While not every organisation faces APT-level threats, those in defence, critical infrastructure, or possessing valuable IP should assume they're targets. APT defence requires comprehensive security programmes.