Six months. That is how long Iranian APT groups were quietly building cyber infrastructure inside the United States before Operation Epic Fury launched on February 28, 2026.
US-based shell companies. Bulletproof hosting in Wyoming. Layered obstructions through Moldova and beyond. MuddyWater showed a measurable spike in flagged infrastructure as early as September 2025. The FBI issued reminders to critical infrastructure organizations in March 2026. The buildup was happening in plain sight, inside American networks, for half a year.
Nobody stopped it while it was happening. Everyone noticed after.
This is not a failure of intelligence. It is a failure of architecture.
Reactive security assumes you will see an attack coming in time to stop it. You watch the perimeter, you wait for the alert, you respond. The problem is that nation-state actors do not announce themselves. They move slowly, deliberately, and quietly. They build infrastructure, test access, and position resources months before they act. By the time your SIEM fires, the work is already done.
The question is not whether an adversary can get into your environment. The question is whether you make them pay a price for trying.
Active deception changes the math. When your network is filled with convincing decoys and continuously shifting attack surfaces, an adversary who quietly probes for six months is not building a map of your infrastructure. They are burning time, burning tools, and revealing themselves against fake targets. Every probe they make costs them something. Every false positive they chase wastes their reconnaissance window.
Automated Moving Target Defense does not wait for an alert. It does not require an analyst to notice something unusual. It makes the environment hostile to the kind of slow, patient, methodical reconnaissance that nation-state actors depend on.
Six months of Iranian pre-positioning got through because the networks they targeted were built to detect attacks, not to make reconnaissance impossible.
There is a difference. It matters.