According to https://ics-cert.us-cert.gov/content/cyber-threat-source-descriptions, here are a few cyber threat source descriptions:
- Bot-network operators: Bot-network operators are hackers; however, instead of breaking into systems for the challenge or bragging rights, they take over multiple systems in order to coordinate attacks and to distribute phishing schemes, spam, and malware attacks. The services of these networks are sometimes made available in underground markets (e.g., purchasing a denial-of-service attack, servers to relay spam, or phishing attacks, etc.).
- Criminal groups: Criminal groups seek to attack systems for
monetary gain. Specifically, organized crime groups are using spam,
phishing, and spyware/malware to commit identity theft and online fraud.
International corporate spies and organized crime organizations also pose
a threat to the
- Foreign intelligence services: Foreign intelligence services use cyber tools
as part of their information-gathering and espionage activities. In
addition, several nations are aggressively working to develop information
warfare doctrine, programs, and capabilities. Such capabilities enable a
single entity to have a significant and serious impact by disrupting the
supply, communications, and economic infrastructures that support military
power - impacts that could affect the daily lives of
- Hackers: Hackers break into networks for the thrill of
the challenge or for bragging rights in the hacker community. While remote
cracking once required a fair amount of skill or computer knowledge,
hackers can now download attack scripts and protocols from the Internet
and launch them against victim sites. Thus while attack tools have become
more sophisticated, they have also become easier to use. According to the
Central Intelligence Agency, the large majority of hackers do not have the
requisite expertise to threaten difficult targets such as critical
- Insiders: The disgruntled organization insider is a
principal source of computer crime. Insiders may not need a great deal of
knowledge about computer intrusions because their knowledge of a target
system often allows them to gain unrestricted access to cause damage to
the system or to steal system data. The insider threat also includes
outsourcing vendors as well as employees who accidentally introduce
malware into systems.
- Phishers: Individuals, or small groups, who execute
phishing schemes in an attempt to steal identities or information for
monetary gain. Phishers may also use spam and spyware/malware to
accomplish their objectives.
- Spammers: Individuals or organizations,
who distribute unsolicited e-mail with hidden or false information in
order to sell products, conduct phishing schemes, distribute
spyware/malware, or attack organizations (i.e., denial of service).
No comments:
Post a Comment