That's generally how actual APT attacks go, yes.