Threat actors and motivations in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a threat actor in cybersecurity?

A threat actor is an individual, group, or organization that conducts malicious activities to harm or exploit computer systems, networks, or data.

beginner

Name three common motivations behind cyber threat actors.

Common motivations include financial gain, political or ideological goals, and personal revenge or notoriety.

intermediate

What type of threat actor is motivated by political or ideological reasons?

Hacktivists are threat actors motivated by political or social causes to promote their agenda through cyber attacks.

intermediate

How do financially motivated threat actors typically operate?

They often use methods like ransomware, phishing, or stealing credit card information to make money illegally.

intermediate

Explain the difference between insider and outsider threat actors.

Insider threat actors are people within an organization who misuse access, while outsider threat actors are external attackers trying to breach systems.

Which of the following is NOT a common motivation for threat actors?

A Financial gain

B Political influence

C Personal revenge

D Improving software security

Improving software security is a positive goal, not a motivation for malicious threat actors.

What type of threat actor is usually an employee misusing their access?

A Insider

B Script kiddie

C Hacktivist

D Nation-state actor

An insider threat actor is someone inside the organization who abuses their access.

Ransomware attacks are mainly motivated by:

A Financial gain

B Political goals

C Personal revenge

D Testing security

Ransomware attackers demand money to restore access, so their motivation is financial gain.

Hacktivists are best described as:

A Employees stealing data

B Attackers with political or social motives

C Criminals seeking money

D Random hackers without goals

Hacktivists attack to promote political or social causes.

Which motivation involves causing harm for personal satisfaction or revenge?

A Financial gain

B Ideological reasons

C Personal revenge

D Nation-state espionage

Personal revenge is when attackers harm others due to grudges or personal reasons.

Describe the main types of threat actors and their typical motivations.

Think about who attacks and why they do it.

Explain how understanding threat actor motivations helps improve cybersecurity defenses.

Knowing why attackers act helps protect better.