Advanced Persistent Threat (APT) actors are defined by their high level of sophistication, significant resources, and persistent, long-term focus on specific strategic targets. They are typically sponsored or operated by nation-states to conduct espionage, steal intellectual property, or disrupt critical infrastructure. Their objectives are strategic and political, distinguishing them from financially motivated cybercriminals who focus on short-term gains.

A. While APTs often use social engineering, their defining trait is their state-sponsorship, persistence, and strategic goals, not a single tactic.

B. A core characteristic of APTs is their affiliation with a sponsoring state or organization, which provides resources and direction.

C. APT campaigns are long-term operations focused on espionage or strategic disruption, not short-term financial scams like ransomware or phishing for credentials.

1. Proofpoint, "The Human Factor 2021," p. 43, Glossary. The report defines APTs as "Well-resourced, typically state-sponsored threat actors who target specific organizations for the purpose of long-term intelligence gathering or disruption."

2. National Institute of Standards and Technology (NIST), "SP 800-39: Managing Information Security Risk," Appendix D. Defines APT as "An adversary that possesses sophisticated levels of expertise and significant resources which allow it to create opportunities to achieve its objectives by using multiple attack vectors..."