Threat actors may compromise third-party network devices that can be used during targeting. Network devices, such as small office/home office (SOHO) routers, may be compromised where the adversary's ultimate goal is not Initial Access to that environment, but rather to leverage these devices to support additional targeting.
This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.