// THREAT DETECTION AND DATA PRIVACY TERM

Advanced Persistent Threat

An Advanced Persistent Threat (APT) is a type of cyberattack where an unauthorized user gains access to a network and stays there undetected for a long period. These attacks are typically conducted by highly skilled and well-resourced groups, often state-sponsored, with specific long-term goals like data theft or espionage.

TECHNICAL DEFINITION

An Advanced Persistent Threat (APT) is a sophisticated, prolonged cyberattack campaign, often orchestrated by nation-state actors or highly organized criminal groups, focused on gaining and maintaining stealthy, unauthorized access to a specific target's network to exfiltrate sensitive data, conduct espionage, or cause disruption, utilizing advanced techniques like zero-day exploits, custom malware, and social engineering to evade detection.

BACKGROUND

An advanced persistent threat (APT) is a stealthy cybersecurity threat, typically manipulated by a state or state-sponsored group, which gains unauthorized access to a computer network and remains undetected for an extended period. In recent times, the term may also refer to non-state-sponsored groups conducting large-scale targeted intrusions for specific goals.

READ MORE ON WIKIPEDIA

SYNONYMS & ALIASES

  • State-sponsored hacking
  • Persistent threat
  • Advanced cyber threat
  • Targeted attack group
  • Sophisticated attacker

USAGE NOTE

Identifying and mitigating APTs requires advanced threat intelligence, behavioral analytics, and a proactive security posture due to their stealth and persistence.

DEVELOPERS

Organizations developing technology related to Advanced Persistent Threat.

  • Mandiant (Google Cloud Security)

    A leading provider of dynamic cyber defense, threat intelligence, and incident response services, known for its deep expertise in tracking and countering Advanced Persistent Threats.

  • CrowdStrike

    Offers a cloud-native platform (Falcon) leveraging artificial intelligence and machine learning to provide endpoint protection, threat intelligence, and security services specifically designed to detect and prevent sophisticated attacks, including APTs.

  • Palo Alto Networks

    Develops a comprehensive suite of cybersecurity products and services, including next-generation firewalls, cloud security, and threat intelligence, to detect and prevent advanced threats and zero-day attacks, often associated with APTs.

  • Microsoft Security

    Provides a vast array of security solutions, including Microsoft Defender XDR, Azure Sentinel, and comprehensive threat intelligence, to protect enterprises from advanced threats, focusing on identity, endpoints, data, and cloud applications.

  • Kaspersky

    Globally recognized for its deep research into Advanced Persistent Threats and the development of security solutions and threat intelligence to protect businesses and critical infrastructure from sophisticated cyberattacks.

  • Fortinet

    Offers a broad portfolio of security solutions, including firewalls, endpoint protection, and security operations platforms, all backed by FortiGuard Labs' threat intelligence to proactively defend against advanced and persistent threats.

  • Trellix

    Formed from the merger of McAfee Enterprise and FireEye Products, Trellix specializes in extended detection and response (XDR) to provide living security, helping organizations dynamically adapt to protect against advanced cyber threats, including APTs.

  • MITRE Corporation

    A not-for-profit organization that operates federally funded research and development centers. MITRE developed the ATT&CK framework, a globally accessible knowledge base of adversary tactics and techniques based on real-world observations, which is crucial for understanding and defending against APTs.

RELATED TERMS IN THREATS & ATTACKS