Threat Actors & System Incursions
These unskilled individuals execute attacks using pre-written code and automated tools, driven primarily by notoriety, ego, or curiosity.
What are Tier 1 actors (or Script Kiddies)?
The FBI’s Internet Crime Complaint Center (IC3) reported that financial losses from cyber fraud reached this staggering baseline amount for the year 2025.
What is $20.9 Billion?
Unlike standard cybercrime, cyberterrorism is designed to result in violence, disruption, and widespread fear among this specific group to achieve ideological goals.
What is a civilian population?
Formulated by Cohen and Felson in 1979, this theory shifted focus away from psychological pathology and argued that crime simply requires an opportunity structure.
What is Routine Activity Theory (RAT)?
This term describes the use of illegal or legally ambiguous digital tools—such as website defacement or massive data leaks—to promote a political agenda or protest injustices.
What is Hacktivism?
This fundamental challenge refers to the difficulty of definitively proving who is responsible for a cyber attack beyond a reasonable doubt in a court of law.
What is the Attribution Problem?
This specific psychological trigger used in social engineering lures forces a victim to act quickly without thinking, such as claiming their account will be suspended in 24 hours.
What is Urgency?
In 2010, this specific piece of malware changed history by physically destroying Iranian nuclear centrifuges, crossing the threshold into physical warfare.
What is the Stuxnet worm?
When applying the VIVA framework to cyberspace, this specific metric—representing the physical weight, size, and mobility of a target—drops to absolute zero for digital data.
What is Inertia?
The LOIC (Low Orbit Ion Cannon) is an open-source tool that democratized this specific type of cyber attack, allowing completely non-technical users to participate just by inputting an IP address and clicking "fire."
What is a DDoS (Distributed Denial of Service) attack?
This legal barrier acknowledges that proving a specific IP address executed an attack does not automatically prove which human was actually pressing the keys.
What is the Keyboard Gap?
Romance scams operate through three anatomical stages: creating the Persona, deploying the Hook, and finally executing this stage to continuously drain the victim's assets.
What is the Bleed?
In May 2021, a ransomware strike breached the IT network of this critical U.S. fuel artery, immediately freezing 45% of the fuel supply for the East Coast.
What is the Colonial Pipeline?
Developed by Robert Agnew, this theory explains that individuals use the internet's tools to lash out when they experience intense negative emotional states, lack of social status, or severe cyberbullying.
What is General Strain Theory (GST)?
In cyberspace, digital target value is often derived from this three-letter acronym, which includes stolen records utilized for synthetic identity theft.
What is PII (Personally Identifiable Information)?
Operating as decentralized, anonymous, and leaderless networks, these Tier 3 threat actors utilize network attacks to promote a political or social agenda.
What are Hacktivists?
This specific form of phishing utilizes phone calls, which are increasingly augmented by AI voice cloning, to impersonate support technicians or bank fraud departments.
What is Vishing?
Originally engineered as a targeted political strike against Ukrainian infrastructure, this 2017 malware rapidly escaped its perimeter to become the most destructive cyberattack in history.
What is NotPetya?
According to Social Learning Theory, isolated digital peer networks teach the hard "Techniques" of malware development alongside these soft internal rationalizations that make the crime feel morally acceptable.
What are Definitions?
This specific category of insider threat involves employees who unintentionally create security breaches through careless habits, such as reusing passwords or falling for social engineering.
What are Negligent Insiders?
These state-sponsored, elite military hacking units establish covert, long-term dwell time inside networks and are capable of critical infrastructure disruption.
What are Advanced Persistent Threats (APTs) or Tier 5 Nation-State Actors?
These profit-driven transnational criminal organizations operate with a corporate structure, utilizing money laundering divisions and Ransomware-as-a-Service (RaaS) models.
What are Tier 4 Organized Cybercriminal Syndicates?
Illustrated by the 2017 NotPetya attack, this two-word term describes when a targeted political cyber strike rapidly escapes its intended perimeter to cause catastrophic global economic damage.
What is the "Spillover Effect"?
Proposed by K. Jaishankar in 2008, this theory explains how the shift from physical to virtual environments allows everyday conformists to engage in deviance due to perceived anonymity.
What is Space Transition Theory?
In cyber subcultures and hacker forums, respect and social hierarchy are not based on geography or wealth, but dictated entirely by this form of merit.
What is technical proficiency (or the successful execution of exploits)?