A Trojan is not an attack vector itself but rather a type of malware. Attackers can use Trojans to deliver and run harmful code on target systems as part of their attack strategy.