Threat actors · Question 11 of 12
An attacker remains undetected for eight months in the network of a defense supplier, uses custom-built tools and selectively exfiltrates design plans. Which classification is most plausible?
1 answer is correct. Hard
Show answer
Answer
- C APT by a state actor with an espionage motive
Explanation
Long dwell time, custom tools, targeted selection of data and a strategically interesting target point to an APT with state backing. Hacktivists would rather publicize their attack, and unskilled attackers rarely stay undetected that long.