An attacker breaches a company's network through a third-party software vendor, and later uses this access to install malware on the company's servers. What type of attack is this?