Targeted attack

Targeted attack is a type of malicious cyber activity that is directed towards a specific individual or organization. It is often more personalized than a general cyber attack, and it may use techniques such as malware, phishing, and malicious network events to gain unauthorized access to data, services, or physical resources. Generally speaking, targeted attacks take more time and effort to carry out than a widespread attack.

Targeted attacks usually differ from generalized or wide-scale attacks because the adversary chooses the victim, the resources that are to be accessed, the access methods, and the objectives of the attack. The concept is often used in connection with topics like espionage, sabotage, political activist activity, identity theft, piracy, and extortion.

A popular example of a targeted attack is spear phishing. This attack involves sending emails crafted to target certain individuals within an organization, often in order to gain access to privileged information. Targeted attacks often take the form of micro-campaigns, with the attacker targeting particular teams or groups.

Organizations and individuals are encouraged to employ security measures to counter targeted attacks, including proactive monitoring of networks and strong security policies. It is also important to identify malicious sources quickly to limit the damage and reduce the impact of a targeted attack.