6.9 Threat Actor Label
Vocabulary Name: threat-actor-label-ov
The threat actor label vocabulary is currently used in the following SDO(s):
- Threat Actor
Threat actor label is an open vocabulary used to describe what type of threat actor the individual or group is. For example, some threat actors are competitors who try to steal information, while others are activists who act in support of a social or political cause. Actor labels are not mutually exclusive: a threat actor can be both a disgruntled insider and a spy. [
Casey 2007
])
| Vocabulary Summary | |
|---|---|
| activist, competitor, crime-syndicate, criminal, hacker, insider-accidental, insider-disgruntled, nation-state, sensationalist, spy, terrorist | |
| Vocabulary Value | Description |
| activist | Highly motivated, potentially destructive supporter of a social or political cause (e.g., trade, labor, environment, etc.) that attempts to disrupt an organization's business model or damage their image. |
| competitor | An organization that competes in the same economic marketplace. |
| crime-syndicate | An enterprise organized to conduct significant, large-scale criminal activity for profit. |
| criminal | Individual who commits computer crimes, often for personal financial gain and often involves the theft of something valuable. |
| hacker | An individual that tends to break into networks for the thrill or the challenge of doing so. |
| insider-accidental | A non-hostile insider who unintentionally exposes the organization to harm. |
| insider-disgruntled | Current or former insiders who seek revengeful and harmful retaliation for perceived wrongs. |
| nation-state | Entities who work for the government or military of a nation state or who work at their direction. |
| sensationalist | Seeks to cause embarrassment and brand damage by exposing sensitive information in a manner designed to cause a public relations crisis. |
| spy | Secretly collects sensitive information for use, dissemination, or sale. |
| terrorist | Uses extreme violence to advance a social or political agenda as well as monetary crimes to support its activities. |