Targeted threats are attacks aimed at a specific person, role, or organization instead of random victims. The attacker usually has a clear objective, such as stealing messages, tracking location, bypassing security, or gaining access to accounts and internal systems. Because the victim is chosen in advance, the attack is often more patient, customized, and harder to detect than broad opportunistic malware.
In cyber security, targeted threats matter because they often combine several techniques: phishing messages written for one person, spyware delivered through convincing links or attachments, and abuse of device or account features to stay hidden. Defenses focus on reducing attacker opportunities and preserving evidence, since targeted campaigns can leave few obvious signs. Strong authentication, device hardening, security monitoring, and rapid forensic review all help. For high-risk users such as journalists, officials, and executives, targeted-threat protection is a baseline requirement, not an extra.