APTs are instances when a threat actor maintains unauthorised access to a system for an extended period of time.