Threat actors can often find targeting certain organizations too much of a challenge. So they need to go through what we can consider back channels — suppliers, vendors, or service providers.