A campaign is a coordinated wave of malicious activity aimed at a specific target set, industry, or region. Instead of one isolated event, it combines phishing, malware delivery, infrastructure, and follow-on actions under a shared playbook. Attackers use campaigns to focus on a narrow audience, which makes their lures more convincing and their operations more efficient.
In cyber security, the word matters because defenders often see patterns only when separate alerts are grouped into one campaign. A Mexico-focused banking trojan campaign, for example, may use local-language emails, country-specific themes, and the same malware family across many victims. On defense, tracking campaigns helps teams tune email filters, block shared infrastructure, hunt for repeated tactics, and understand whether a new sample is part of a broader operation. Campaign analysis turns scattered events into a usable threat picture.