Learn in the textbookTargeted Attacks and Phishing Scams
DefinitionA targeted attack (標的型攻撃) singles out a specific organization or person, delivers malware through email or other messages crafted for that target, and steals information.
ExplanationThe message is dressed up as coming from a business partner or as routine work correspondence, so the recipient opens it without suspicion. Once inside through the opened attachment or URL, the attacker uses tools such as a remote-control program (RAT) that operates the PC from outside to carry off important information. Depending on how it approaches the target and how long it keeps going, it splits into types such as APT and the watering-hole attack.
AnalogyIt is like finding out the name of a department head at a company and then delivering a convincing fake internal memo to one of their subordinates to open.