Understand Attackers

Different types of threat actors

Advanced Persistent Threats:

Significant expertise accessing an organization's network without authorization. APTs tend to research their targets (e.g. large corporations or government entities) in advance and can remain undetected for an extended period of time. Their intentions and motivations are...

• Damaging critical infrastructure, such as the power grid and natural resources

• Gaining access to intellectual property, such as trade secrets or patents

Insider Threats:

Abuse their authorized access to obtain data that may harm an organization. Their intentions may include...

• Sabotage

• Corruption

• Espionage

• Unauthorized access or data leaks

Hacktivists:

Hacktivists are threat actors that are driven by a political agenda. They abuse digital technology to accomplish their goals, which may include...

• Demonstrations

• Propaganda

• Social change campaigns

• Fame

Hackers

Any person or group who uses computers to gain unauthorized access to data. They can be beginner or advanced technology professionals who use their skills for a variety of reasons. There are three main categories of hackers...

• Authorized hackers are also called ethical hackers. They follow a code of ethics and adhere to the law to conduct organizational risk evaluations. They are motivated to safeguard people and organizations from malicious threat actors.

• Semi-authorized hackers are considered researchers. They search for vulnerabilities but don’t take advantage of the vulnerabilities they find.

• Unauthorized hackers are also called unethical hackers. They are malicious threat actors who do not follow or respect the law. Their goal is to collect and sell confidential data for financial gain.

Note: There are multiple hacker types that fall into one or more of these three categories.

New and unskilled threat actors have various goals including...

• To learn and enhance their hacking skills

• To seek revenge

• To exploit security weaknesses by using existing malware, programming scripts, and other tactics