Which category of threat actor is typically motivated by financial gain and operates like a business, often using Ransomware-as-a-Service?
- A.A. Nation-state actors
- B.B. Hacktivists
- C.C. Organized cybercrime groups
- D.D. Script kiddies
Why C is correct
Organized cybercrime groups are financially motivated and operate with business-like structures (developers, affiliates, negotiators). Many offer Ransomware-as-a-Service (RaaS), selling or leasing ransomware tools to affiliates. Notable groups include LockBit, ALPHV/BlackCat, and Cl0p.
Know someone studying for Security Fundamentals? Send them this one.