Threat Actor

Updated 31 Jul 2026

•
def
- •
  the entity responsible for an event that has an impact on the safety of another entity — also called a malicious actor
•
attributes used to categorize a threat actor
- •
  internal/external — is the attacker inside the organization, or outside trying to get in?
- •
  resources/funding — ranging from no money to extensive funding
- •
  level of sophistication/capability — from blindly running pre-made scripts, to writing their own attack malware and scripts
•
motivations
- •
  data exfiltration, espionage, service disruption, blackmail, financial gain, philosophical/political beliefs, ethical reasons, revenge, disruption/chaos, war
•
types
•
related
- •
  Threat
•
cards
- •
  Name the 6 types of threat actors
  - •
    Nation state, unskilled attacker, hacktivist, insider threat, organized crime, shadow IT

Linked references 9