The problem with an APT-style attack is there are so many ways to get in, so organizations should look more closely at introducing Multi-Factor Authentication in the cloud, as the new PCI Virtualization Guidelines strongly recommend.
FORBES: Securing Data in the Cloud? Call in the Magnificent Seven