From the course: CompTIA Security+ (SY0-701) Cert Prep

Attacker motivations

From the course: CompTIA Security+ (SY0-701) Cert Prep

Start my 1-month free trial

Attacker motivations

“

- [Instructor] Let's spend some time talking about some of the goals that attackers have when they break into systems, networks, and applications. First, attackers might be attempting to perform data exfiltration. In this case, they're targeting sensitive information within the system that can be of high value. This might include intellectual property, customer, or employee data, or financial records. Attackers may also be conducting espionage. In this scenario, they covertly monitor and extract information from the target system for a sustained period of time. Their objective might be to gain strategic, political, or economic advantages. Corporate competitors, or state actors, might employ this tactic to gather insights about future products, internal strategies, or to destabilize operations. Service disruption is another common goal of attackers. They may launch denial of service attacks or deploy ransomware to cripple a system, causing significant downtime. These attacks are designed to impede the normal functioning of systems, often leading to financial losses and damaging the reputation of the targeted organization. Blackmail is another common motive for attackers. They might infiltrate systems to obtain sensitive information and then threaten to disclose that information publicly unless a ransom is paid. This might include personal data of customers or confidential business data that, if revealed, could have serious legal or reputational consequences. Some attackers are motivated by financial gain, by infiltrating systems, they can steal credit card information, perform bank fraud, or engage in cryptocurrency mining. Hacktivists break into systems driven by philosophical or political beliefs. Their aim could be to expose perceived injustices, make political statements, or trigger change by revealing sensitive information to the public. Ethical hacking involves authorized penetration of systems with the goal of discovering vulnerabilities that can then be addressed. These attackers employed as cybersecurity professionals aim to improve system security through their work. Revenge attacks are often personal and targeted. Disgruntled employees or business rivals might break into systems to cause harm as a form of retribution. This could involve sabotage or the leaking of sensitive information with the intention of causing reputational or financial damage. Some attackers may aim to cause disruption or chaos. They might deploy malware that disrupts operations or spread false information to create confusion and mistrust. These attacks can be particularly destructive and are often difficult to anticipate and prevent. Finally, governments may sanction cyber warfare attacks on another country's critical infrastructure, such as power grids, transportation systems, or communication networks. These can be part of a larger military strategy aimed at destabilizing or incapacitating a nation.

Contents