An advanced persistent threat (APT) is a sustained intrusion campaign against selected targets by a capable, well-resourced actor. APTs are associated with cyber espionage and modern warfare, where state-sponsored groups use sophisticated surveillance techniques against victims. section 1.1
Researchers trace an APT by following its signature techniques rather than treating every incident as unrelated. The security community commonly assigns these groups memorable code names, helping analysts discuss and track recurring activity. section 1.1
Named APT groups
Cozy Bear is identified as a Russian hacking group, while Charming Kitten is identified as an Iranian government cyberwarfare group. Such names label tracked threat groups, not a single attack. section 1.1
