A targeted attack is an intrusion attempt aimed at a specific person, device, account, or organization rather than a broad pool of random victims. The attacker usually has a clear objective, such as surveillance, credential theft, fraud, or access to sensitive data. Because the target is chosen in advance, the attack often looks more tailored than commodity malware or mass phishing.
Targeted attacks matter because they can use more effort and better tools to bypass ordinary defenses. In real operations, they may involve reconnaissance, spear phishing, abuse of trusted relationships, stolen credentials, or chained vulnerabilities that are reserved for high-value targets. Defenders look for unusual login activity, device compromise indicators, and signs of focused reconnaissance. Good defenses include strong authentication, rapid patching, mobile and endpoint monitoring, and alerting systems that warn a user when a device or account may be under selective attack.