Threat Actors

Question 1

Script Kiddie

Answer 1

No formal funding, not a large organisation, uses prebuilt scripts – motivated by the hunt/bragging rights.

Question 2

Hacktivist

Answer 2

Hacker that has a goal/motivation. Create social change or political agenda. DoS attacks/release sensitive information – Has fundraising options, can acquire funds.

Question 3

Organised Crime

Answer 3

Motivated by Money. Carry out sophisticated attacks. Has multiple people to carry out different roles – one person hacking, another managing exploits, sells data, customer support.

Question 4

Nation State/APT

Answer 4

Hacker usually works for the government, carries out attacks external organisation or government. Very sophisticated hacking. Usually attacking military organisations or large security sites. Can spend as much time, resource and money to find vulnerabilities on their victims.

Question 5

Insiders

Answer 5

Attacker systems what are vulnerable. Pinpoint what they are going after. Has access to the whole network.

Question 6

Competitors

Answer 6

Every company has a competitor. Maybe they are looking for sensitive information or to harm reputation, bring down your website by a DoS attack. High level of sophistication. High level of funding. They would try to take financial information, take customer data, corrupt your db, shut down your company at an event.