thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

Advanced Persistent Threat (APT)

A well-resourced, stealthy adversary that gains long-term access to a target to steal data or prepare for disruption.

Definition

An APT is typically a nation-state or state-sponsored group that uses custom tooling, zero-days and careful operational security to remain undetected for months or years. APTs pursue strategic objectives such as espionage or pre-positioning in critical infrastructure rather than quick profit. Vendors track them under names like APT29 (Midnight Blizzard) or APT41.

Example

APT29 compromising a software vendor's build pipeline to reach government customers is an APT campaign.

Exam tip

"Persistent" and "long dwell time" in a question stem usually point to APT, not organized crime.

Related terms