These are groups that can pose risks to organizations, governments and individuals.
Types
- Nation State
- Advanced Persistent Threat
- Unskilled Attacker
- Hacktivist
- Insider Threats
- Organized Crime
- Shadow IT
Classifications
Acessibility
- Internal : Attackers from within the organization taking advantage of familiarity with sytems and networks (Insider Threats)
- External: Attackers from outside the organization that often use Social Engineering to access resources (Organized Crime)
Funding
- Well-Resourced : Threat actors that have access to substantial resources (Nation State, APT)
- Limited resources : Small-scale cybercriminals that operate with limited resources (Hacktivist, Script Kiddie)
Sophistication
- High sophistication: Actors posses technical skills of various attack vectors (Nation State, APT, Organized Crime)
- Less sophisticated: Attackers with little skill (Script Kiddie)