>silently exfiltrate useful data/create an advanced persistent threat The chinese successfully pulled this off at Lockheed in the early 2000s They would get l

>silently exfiltrate useful data/create an advanced persistent threat The chinese successfully pulled this off at Lockheed in the early 2000s They would get lists of employees who attended various conferences, then email them a trojan saying "hey we met at conference X - here is something for you to click on" And employees would fall for it. The malware would TRICKLE out data very slowly so as not to be noticed. They did this for a LONG time. At the time, lockheed only had 3 egress points to the internet - and they had 110,000 laptops. Another attack vector was the same as stuxnet - airgap; attack a supplier in taiwan, infect any USB stick put into the suppliers machines, then transfer once that USB stick was put into the Lockheed machine. When the ruse was discovered - the chinese removed the throttle and they attempted to firehose out as much data as they could before they were cut off.