Examkin

Question

Difficulty: MediumThreat Actors, Attributes, and Attack Vectors

A security analyst at a global hospitality enterprise discovers an unauthorized remote access tool installed on point-of-sale systems across multiple properties. Investigation reveals that an external adversary gained initial access using compromised credentials from a third-party vendor to deploy custom malware specifically designed to harvest credit card data for long-term monetary profit. Based on these observed attributes, which threat actor type and primary motivation best describe this adversary?

  1. Organized crime motivated by financial gainAnswer
  2. B
    Hacktivist group motivated by ideological causes
  3. C
    Nation-state threat actor motivated by geopolitical espionage
  4. D
    Insider threat motivated by operational grievance

Answer

Organized crime motivated by financial gain
The correct answer accurately identifies organized crime motivated by financial gain. Organized cybercrime syndicates typically target financial instruments, point-of-sale infrastructure, and credit card numbers using external attack vectors (such as compromised supply chain credentials) to generate illicit revenue.

Step-by-Step Solution

1
Analyze the attack vector and access method
The intrusion originated externally via stolen third-party vendor credentials, indicating an external adversary rather than an insider.
Threat actors are categorized by their origin point (internal vs. external) and vector of entry.
2
Evaluate the primary objective and target asset
The target was point-of-sale financial data specifically collected for monetary monetization.
Adversary intent directly maps to threat actor classifications and profile attributes.
3
Correlate attributes to threat actor profiles
External origin, sophisticated target selection (POS systems), and financial motivation directly match the profile of organized cybercrime groups.
Organized crime threat actors systematically seek financial exfiltration using well-resourced tools.

Key Concept

Threat Actor Profiling and Attributes
Rate this question

Topics

Threat Actors, Attributes, and Attack Vectors

More questions from this topic