A supply chain attack (or third-party attack) is a threat that targets suppliers instead of directly attacking specific companies. 

This makes detection and protection more difficult, especially in cases where suppliers do not adhere to strict cyber security criteria.