Soru

Zorluk: OrtaThreat Actors, Attributes, and Attack Vectors

A security analyst at a municipal emergency dispatch center is investigating a targeted network breach. The adversary gained initial access through compromised supply chain vendor credentials, utilized custom zero-day exploits to maintain persistent access across system reboots, and subtly modified dispatch routing tables without demanding a ransom or exfiltrating data. Threat intelligence reports indicate the threat group operates with state-sponsored backing, high technical sophistication, and extensive financial resources aimed at critical infrastructure disruption. Which of the following threat actor categories best describes the adversary behind this attack?

  1. Nation-state actorCevap
  2. B
    Hacktivist collective
  3. C
    Organized crime syndicate
  4. D
    Script kiddie

Cevap

Nation-state actor
The correct answer is the nation-state actor because the scenario describes state-sponsored backing, custom zero-day development, high financial resources, and stealthy operational disruption of critical public safety infrastructure without a financial motive.

Adım Adım Çözüm

1
Analyze threat actor attributes from the scenario context
Identified high technical sophistication (custom zero-day exploits), state-sponsored funding, supply chain vector, and intent targeted at critical infrastructure disruption rather than financial extortion.
Threat actor categorization depends on aligning observed tactics, techniques, procedures (TTPs), funding level, and primary motivation.
2
Evaluate motivations and capabilities against standard threat actor profiles
Nation-state actors are characterized by advanced persistent threat (APT) capabilities, substantial backing, stealthy persistence, and strategic intent against vital infrastructure.
Differentiating nation-state actors from cybercriminals or hacktivists requires matching resource depth and operational goals.

Anahtar Kavram

Threat Actor Types, Attributes, and Motivations
Bu soruyu puanla