A set of malicious activities in cyberspace that share common characteristics, often conducted by a single individual or group, and aimed at specific targets over a long period. The term is also used for the groups themselves.
Definition after the glossary of the Australian Signals Directorate (ASD): the targets are usually private organisations, states or both, for business or political motives. Council Decision (CFSP) 2020/1127 refers, for example, to “APT10” and “APT38/Lazarus Group”.1,2
More in the operation card: NotPetya.
Sources
- Australian Signals Directorate (cyber.gov.au), Glossary: Advanced persistent threat (APT)
- Council of the European Union, Council Decision (CFSP) 2020/1127 of 30 July 2020 (sanctions for cyber-attacks), recitals and annex
Checked: 3 November 2026