A high-precision semiconductor fabrication facility experiences intermittent disruptions across its automated silicon wafer etching equipment. Investigation reveals that custom-compiled bootkit firmware was stealthily flashed onto isolated industrial controllers. The attackers gained initial access six months prior by compromising an offshore vendor's network management software used for remote equipment maintenance, demonstrating long-term persistence, custom exploit development, and zero-day evasions without requesting ransom or leaving overt defacement signatures. Which TWO of the following threat actor attributes or attack vectors are demonstrated in this scenario? (Select TWO)
- Nation-state or Advanced Persistent Threat (APT) actor attributes characterized by high sophistication, deep resources, and strategic espionage or sabotage intentCevap
- BHacktivist collective attributes motivated by public ideological awareness and opportunistic web surface defacement
- Supply chain and trusted third-party vendor attack vector leveraging external partner access channelsCevap
- DDirect physical access attack vector utilizing unauthorized insertion of rogue hardware directly into the facility perimeter
Cevap
The threat actor demonstrates nation-state / APT attributes (high sophistication, extended dwell time, custom bootkit development, non-monetary strategic goals) and utilized a supply chain / trusted third-party vendor attack vector (compromising an external maintenance vendor's remote software).
The scenario depicts a sophisticated intrusion characterized by custom bootkit firmware, zero-day capabilities, and stealthy persistence, which defines a nation-state or Advanced Persistent Threat (APT) actor. Furthermore, the entry point involved an external maintenance provider's software, which defines a supply chain / third-party vendor attack vector.
Adım Adım Çözüm
Anahtar Kavram
Threat Actor Attributes and Attack Vectors