The attackers usually target business suppliers like managed service providers and technology vendors to gain access to a business' corporate network.