Most threat actors these days are more mature than they were before. An organization will find out about a cyber attack on its network, in the late stages of the attack, when the damage has already been caused. However, one of the most critical stages in the cyber kill chain is the delivery of the malware.
Article Link: Phishing Attacks and Minerva Armor