Cybersecurity Threat Landscape: Actors, Vectors, and Defenses
🔎 Threat Actors & Their Attack Paths
Who is attacking?
Threat Actors are the people or groups launching attacks. Mnemonic: “NO HIS” (Nation-State, Organized Crime, Hacktivists, Insiders, Script Kiddies).
| Actor Type | Motivation | Tactics |
|---|---|---|
| Nation-State (APT Groups) | Espionage, warfare | Advanced, persistent attacks |
| Organized Crime | Financial gain | Ransomware, phishing |
| Hacktivists | Social justice, ideology | Website defacement, data leaks |
| Insiders | Revenge, profit | Data theft, sabotage |
| Script Kiddies | Fun, fame | Low-skill attacks using existing tools |
How do threats reach systems?
Threat Vectors are the attack paths used by threat actors. Mnemonic: “MFWDVN” (Messages, Files, Websites, Devices, Vendors, Networks).
| Attack Path | Example | How It Works |
|---|---|---|
| Message-Based | Phishing, smishing | Trick |
English with a size of 9.76 KB