Ray, a professional hacker, targets the IT infrastructure of an organization. After preparing for the attack, he attempts to enter the target network using techniques such as sending spear-phishing emails and exploiting vulnerabilities on publicly available servers. Using this technique, he successfully deployed malware on the target system to establish an outbound connection. What is the APT lifecycle phase that Ray is currently executing?