Examkin

Question

Difficulty: EasyThreat Actors, Attributes, and Attack Vectors

A municipal public transit organization discovers that its public announcement website was defaced with political slogans during an election cycle. Incident responders determine that the attacker utilized pre-built exploit scripts downloaded from an open forum, without customizing code or attempting to establish long-term persistence. Which of the following threat actor types is most likely responsible for this incident?

  1. A hacktivist motivated by ideological goals using readily available, low-sophistication toolsAnswer
  2. B
    A nation-state threat actor seeking covert long-term intelligence gathering
  3. C
    An insider threat leveraging legitimate credentials for unauthorized data exfiltration
  4. D
    An organized crime syndicate delivering customized Trojan malware for financial extortion

Answer

A hacktivist motivated by ideological goals using readily available, low-sophistication tools
The correct answer describes a hacktivist. Hacktivists operate based on political, social, or ideological motivations. They commonly target high-visibility public assets like websites to broadcast messages, often using open-source scanning and exploitation scripts due to limited custom development capabilities.

Step-by-Step Solution

1
Analyze the threat actor's primary motivation
Defacing a public website with political slogans indicates an ideological or political motive.
Threat actor categories are defined largely by their intent; political messaging aligns with hacktivism.
2
Evaluate the technical sophistication and resources used
Relying on downloaded, pre-packaged exploit scripts without custom modifications reflects low technical sophistication and minimal financial backing.
Understanding resource level distinguishes highly funded actors from opportunistic or script-reliant actors.
3
Correlate motivation and capability to identify the threat actor type
The combination of ideological intent and low-sophistication tooling points directly to a hacktivist.
Matching observed tactics, techniques, and procedures (TTPs) with actor profiles yields the correct classification.

Key Concept

Threat Actor Types, Motivations, and Sophistication Levels
Estimated Time:45s
Rate this question

Topics

Threat Actors, Attributes, and Attack Vectors

More questions from this topic