Examkin

Question

Difficulty: EasyThreat Actors, Attributes, and Attack Vectors

A system administrator at a retail organization notices automated scans targeting the company's public web server using off-the-shelf, publicly available exploit toolkits. The activity demonstrates minimal technical expertise and relies entirely on well-known vulnerabilities without using custom tools or zero-day exploits. Which threat actor type is most likely responsible for this activity?

  1. Script kiddieAnswer
  2. B
    Nation-state actor
  3. C
    Hacktivist
  4. D
    Advanced Persistent Threat (APT)

Answer

Script kiddie
The term 'script kiddie' refers to an attacker who uses existing, publicly available tools and automated scripts created by others due to a lack of deep technical capability to develop original exploits.

Step-by-Step Solution

1
Analyze the threat actor attributes described in the scenario
Identified minimal technical sophistication, reliance on off-the-shelf tools, and lack of custom exploits
Evaluating key adversary traits allows proper classification of the threat actor type
2
Map the identified attributes to threat actor profiles
Script kiddies uniquely match the profile of using existing scripts without deep technical expertise
Distinguishing actor capability levels is essential for accurate security threat assessment

Key Concept

Threat Actor Attributes and Sophistication Levels
Rate this question

Topics

Threat Actors, Attributes, and Attack Vectors

More questions from this topic