Security+ Objectives 1.3

1.3 Explain threat actor types and attributes

Types of actors

• Script kiddies — An attack with little expertise or sophistication. Script kiddies use existing scripts to launch attacks.
• Hacktivist — An attacker who launches attacks as part of an activist movement or to further a cause.
• Organized Crime — this is the commission of a crime using computer-oriented manners. Also referred to as cyber-crime in which it may threaten a person, company or a Nation’s security or financial health. Typically has a hierarchy within the organization.
• Nation states/ Advanced persistent threat (APT) — Attacker that are organized or sponsored by a nation-state or government. The attacks are typically launched by a sophisticated group that has high capability.
• Insiders — An attacker who launches attack from within an organization, typically as an employee.
• Competitors — Competitors which are typically motivated to gain proprietary information about the company. They seek to find information or cause damage in a way that can benefit their own agenda.

Attributes of Actors

• Internal / External — Where the attack may come from.
• Level of Sophistication — The skill level of the attacker.
• Resources/funding — The resources available to the attacker.
• Intent/ Motivation — Why the attack is happening.

Use of open-source intelligence

• Open-source intelligence — A method of gathering data using public sources, such as social media sites and new outlets.