An attack is what you see, but a business operation is what you're up against