What is a threat actor?

A threat actor is whoever is behind an attack: a criminal group, a state-backed team, a hacktivist, a lone individual or an insider such as an unhappy employee. The term is used because a person or group, not a piece of software, is making the decisions. Most attacks on small and mid-sized companies come from criminal groups motivated by money, usually through ransomware, extortion or invoice fraud, and they choose victims by opportunity rather than by name. Knowing which actors target your industry helps decide where to spend first, but the basic defences are the same for almost all of them.

← All 69 questions on What is…? Network and security termsAll topics