Threat Actor Types
Motivations
Insider vs. External
Stuxnet Basics
Nation States & APTs
100

Clue: These are unskilled attackers who rely on tools created by others.

Answer: What are Script Kiddies?

100

Clue: This motivation includes stealing data for unauthorized access or sale.

Answer: What is data exfiltration?

100

Clue: This actor has trusted access to a company’s network.

Answer: What is an internal (insider) threat actor?

100

Clue: Stuxnet targeted this country’s nuclear enrichment program.

Answer: What is Iran?

100

Clue: These advanced cyber actors often have military expertise and long‑term goals.

Answer: What are APTs (Advanced Persistent Threats)?

200

Clue: These attackers commit exploits for a political or social cause.

Answer: What are Hacktivists?

200

Clue: Destroying or disrupting networks and systems is known as this.

Answer: What are service disruptions?

200

Clue: This actor lacks special access to a network.

Answer: What is an external threat actor?

200

Clue: Stuxnet was originally designed to damage this specific machine type inside Natanz.

Answer: What are centrifuges?

200

Clue: Stuxnet is widely believed to have been created by these two nations.

Answer: What are the United States and Israel?

300

Clue: This group includes criminals who sell data, steal secrets, and are fueled by money and power.

Answer: What is Organized Crime?

300

Clue: Financial pressure using threats is known as this motivation.

Answer: What is blackmail?

300

Clue: This term describes IT systems created by employees without IT approval.

Answer: What is Shadow IT?

300

Clue: Stuxnet escaped Natanz after being carried out on one of these.

Answer: What is a laptop/USB drive?

300

Clue: Nation‑state malware is often intended to achieve this type of goal against rivals.

Answer: What is espionage or strategic disruption?

400

Clue: These threat actors work within an organization to expose data, sometimes out of spite.

Answer: What are Insider Threats?

400

Clue: This motivation includes actions taken for political or philosophical reasons.

Answer: What are political or philosophical beliefs?

400

Clue: This type of hacker intentionally causes harm and damage.

Answer: What is a black hat hacker?

400

Clue: The U.S. and Israel jointly conducted this secret cyber operation.

Answer: What is Operation Olympic Games?

400

Clue: This high‑profile malware was discovered after Stuxnet and is believed to be part of similar nation‑state cyber activity.

Answer: What is Flame?

500

Clue: These actors are highly advanced and often military or intelligence‑backed.

Answer: What are Nation States or APTs?

500

Clue: Insider threats are often driven by these two factors.

Answer: What are financial gain and revenge?

500

Clue: This group breaks rules inside an organization but isn’t fully malicious.

Answer: What is Semi‑authorized (Gray Hat) Hackers?

500

Clue: This U.S. leader criticized the potential global consequences of deploying cyberweapons like Stuxnet.

Answer: Who is President Barack Obama?

500

Clue: This U.S. strategy document warned that cyberattacks could justify military retaliation.

Answer: What is the International Strategy for Cyberspace (2011)?

M
e
n
u