2.2 & 2.3 types and motivation for attackers

2.2 & 2.3 types and motivation for attackers

1. Hacktivist

   • Activity
     • Illegal access to a computer system or network
   • Motivation
     • Politically or socially motivated - they disagree with someone else's viewpoint
   • Characteristics
     • Activities are distributed as opposed to destuctive
     • Can be state sponsored
     • Can be IT professionals
     • Can be disaffected young people

2. Cyber criminal

   • Activity
     • Uses computers to perform malicious activities
     • Uses computers as a weapon for sending spam or committing fraud
     • Uses computers
   • Motivation
     • Espionage
     • Financial gain
     • Create havoc
   • Charatceristics
     • Often works in organised groups
     • Sells services to the highest bidder

3. Scammers

   • Activity
     • Offers goods or opportunities to others to make quick money by sending emails with a false link
     • Targets many people at one time
   • Motivation
     • Identity fraud
     • Financial gain
   • Characteristics
     • Likable and confident personality
     • Will not answer questions about themselves
     • May ask for money using a hard luck story

4. Vulnerability broker

   • Activity
     • Finds bugs in programs and systems of other companies.
   • Motivation
     • Financial gain
   • Characteristics
     • A high level of IT expertise with respect to programs and systems
     • May have formally been a cyber criminal

5. Scrip kiddie

   • Activity
     • Uses existing computer scripts or code to hack into computers and deface websites
   • Motivation
     • Publicity
     • Wants the power of a hacker without the training involved
     • Thrill of hacking
   • Characteristics
     • Teenagers
     • Little or no hacking skills
     • Steals code claiming it as their own
     • Will over-emphasise their computer abilaties

6. Insider

   • Activity
     • A threat from within an organisation
     • Threats can be malicious or accidental
   • motivation
     • Personal use
     • Financial gain
     • Sabotage
   • Characteristics
     • Tends to violate organisational rules and regulations
     • Antisocial behaviour
     • Lack of self control
     • Desires revenge

7. Phishers

   • Activity
     • Obtains sensitive information for malicious intent
     • Targets individuals
   • Characteristics
     • Can be from anywhere in the world
   • Motivation
     • Financial gain
     • theft of intellectual property

8. Cyber terrorists

   • Activity
     • Uses computers and communication systems to cause fear or intimidation in a society through the destruction of or damage to people, property and systems
   • Motivation
     • To intimidate a society into changing for the purpose of an ideological goal
     • Righting perceived wrongs
     • To install fear in others
   • Characteristics
     • May have ideological or religious reasons for wanting to terrorize others
     • Can be based anywhere in the world
     • High-end programming skills
     • Personal gain