The Starwood/Marriott breach has implications for both Marriott International and the companies watching to learn from. Experts say several factors might have contributed to the longer-than-usual dwell time. The average dwell time for an attack is 101 days, according to Mandiant. The long dwell time is an indicator that the attackers were nation-state threat actors, Gartner’s Avivah Litan says. Litan: “These guys are really good at what they do they hide in places you can’t find””]
Source: https://www.darkreading.com/attacks-breaches/starwood-breach-reaction-focuses-on-4-year-dwell