APT (Advanced persistent threat) ,its essence is targeted attack. Using advanced attack means to carry out long-term persistent network attack on specific targets. The principle of APT attack is more advanced than other attack forms, and its advanced nature is mainly reflected in the fact that APT needs to accurately collect the business process and target system of the attack object before launching the attack.
In the process of collection, this attack will take the initiative to exploit the vulnerability of the target application and the network needed by the attacker, and use the 0 day vulnerability to attack the core data for the purpose of targeting the network launched by the client, which is a long-term “malicious commercial espionage threat”. This kind of behavior often has a high degree of concealment after long-term operation and planning.
In this collection process, this attack will actively explore the vulnerabilities of the trusted system and application of the attacked object, use these vulnerabilities to build the network required by the attacker, and use 0 day vulnerabilities to attack. For the purpose of stealing core information, cyber attacks and intrusions against customers are a long-planned "malicious business espionage threat." This behavior is often after long-term management and planning,And has a high degree of concealment.