Third party. A third party provides endpoints (hacked routers, phones, laptops, desktops, IoT devices, etc.)