When investigating breaches and attempting to attribute them to specific threat actors, which of the following is not one of the indicators of an APT?

Long$-$term access to the target

Sophisticated attacks

The attack comes from a foreign IP address.

The attack is sustained over time.