Hackers don’t look at specific systems. They don’t search for vulnerabilities in only one of your websites. They don’t focus their efforts only on your admins
When planning APT’s, hackers will use any means available – from Clear Net news sources to Dark Net discussion forums – to find and exploit vulnerabilities in your operation. They will look at employees, executives, websites, internal systems, technology products, and on and on, in order to find the right combination of vulnerabilities that will enable them to carry out a successful attack.