A manufacturer's file servers and ERP are encrypted by a gang that demands cryptocurrency for the decryption key. Which actor type best fits this behavior?
- A.State-sponsored sabotage team with grid access
- B.Politically driven hacktivist collective
- C.Financially motivated ransomware operator
- D.Disgruntled maintenance contractor from a supplier
Why C is correct
Encrypting systems and demanding payment is the business model of criminal ransomware crews. State teams pursue strategic goals, hacktivists seek publicity, and a contractor with a grudge would target a specific employer rather than sell keys.
Know someone studying for OT Security Fundamentals? Send them this one.