Cyber Primer

Cyber threats
2.5. Cyber attacks can appear in many guises, without necessarily inflicting
visible or tangible material damage and are more easily deniable by the
perpetrator. All of this significantly increases the likelihood that an adversary
may seek to create effects through cyberspace. Cyber attacks currently have
a lower political and public perception of aggression when compared with
more traditional and visibly damaging attacks where lives or property are
obviously and physically threatened. 20 This is largely based on the fact that
there have been no publicised, large-scale events (including the loss of life)
that have been positively attributed to a cyber attack. Should such an event
happen, this would likely change the public’s perception to the potential
‘aggressive’ nature of cyber attacks; it is the effect that is important not the
means of delivery.
Threat actors
2.6. The term ‘threat actor’ is used to identify those who pose a threat.
Threats to security in, and through, cyberspace include state-sponsored
attacks, ideological and political extremism, serious organised crime,
lower-level/individual crime, cyber protest, cyber espionage and cyber
terrorism. Threat actors fall into six broad categories: nation states; terrorists;
criminals; patriotic hackers; hacktivists; and insiders. 21 To some degree each
category of threat actor is supported by the actions of hackers, who use
their skills to adapt and exploit computer software and systems for purposes
unintended by the original creators. 22 Each group’s membership can vary
greatly in terms of sophistication, scale and motive and may pose differing
types of threat. At all levels, the actor’s motivation is key, whether it is to:
• support national goals (either on behalf of, or directly for, a
governmental body);
• generate income (either legitimately or through crime);
• improve personal technical skills; or
• support political ideals (hacktivisim).
20 The majority of cyber ‘attacks’ are actually criminal acts.
21 More information on these categories can be found from paragraph 2.8 onwards.
22 Some hackers, such as the notorious hacker Kevin Mitnick, claim they are motivated by
the challenge of hacking alone and do not seek financial gain or ideological advancement
from their activities.
Cyber Primer (2nd Edition) 23