One of the main objectives of APT is confidential data. But do not forget that such threats involve a certain scenario. First, they must stay in the infected system as long as possible to extract the most valuable data and resell it to third parties. Another thing about APT is that they use existing exploits, custom applications, and server architectures to avoid wasting time inventing what’s already there. The ultimate goals may not be money and profit, but the typical data leak controls servers and websites.