Phishing and zero-days continue to be a core part of the APT arsenal.
Source: Threadpost