← Years 9–10 Digital Systems

Threat actor

A person or group that carries out an attack on a system, described by their motive (why) and skill (how able). Examples: cybercriminals, hacktivists, insiders and nation-state groups.

Part of: 9-10 Digital Technologies Vic Curric - Digital Systems and Security — Module 35, VCE Software Development - U4O2 - Cyber Security: secure software development practices — Module 11, ACARA Digital Technologies Years 9–10 — Cyber Security Threats and Vulnerabilities — Module 10

Understanding Threat actor in Years 9–10 Digital Systems

What it does: The code shows a threat actor as a record with the two features used to describe it: motive and skill. The hacktivist's motive is a cause, not money, which sets it apart from other threat actors. A threat actor is who carries out the attack. A weakness in software is a vulnerability. Cybercriminals are mainly motivated by money, so stealing and selling card details fits them. Hacktivists attack to push a political or social cause, not to make money. An insider already has legitimate access to the system, which is what makes them different from outsiders. Nation-state groups work for or are supported by governments. They often have high skill and large budgets.

Common mistakes: Cybercriminals are mainly motivated by money, not protest. Line 2 should be motive = "money". The string is missing its closing quote. It should be actor = "hacktivist".

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Threat actor to a class →

This module's key terms are also in a printable crossword (Modules 25–40) and word search (Modules 13–40).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Which describes a threat actor?
A person or group that carries out an attackA weakness in software that can be attacked
Matches
hacktivist.motive = "money"
↓
Hacktivists are driven by a political or social cause, not money. Money is the motive of cybercriminals.
Applying
Meanings
Term
threat actor
Meaning
A person or group that carries out an attack on a system, described by their motive (why) and skill (how able). Examples: cybercriminals, hacktivists, insiders and nation-state groups.
Practice
threat_actor ← "cybercriminal"
Testing
Gaps
motive =
Check Answer
Spots
1actor = "cybercriminal"
2motive = "protest"

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Gila Monster' badge — Patient Coder, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which describes a threat actor?
A. A person or group that carries out an attack ✓
B. A weakness in software that can be attacked
A threat actor is who carries out the attack. A weakness in software is a vulnerability.
2. A group breaks into online shops to steal card details and sell them for money. Which type of threat actor is this?
A. Hacktivists
B. Cybercriminals ✓
Cybercriminals are mainly motivated by money, so stealing and selling card details fits them.
3. A group defaces a company website to protest its environmental record. Which type of threat actor is this?
A. Hacktivists ✓
B. Nation-state groups
Hacktivists attack to push a political or social cause, not to make money.
4. A threat actor is described by their motive and skill.
A. True ✓
B. False
Motive is why they attack and skill is how able they are. Together these describe a threat actor.
5. An employee who is angry about being fired deletes company files. Which type of threat actor is this?
A. Cybercriminal
B. Insider ✓
An insider already has legitimate access to the system, which is what makes them different from outsiders.

Match the Pairs

cybercriminal → A threat actor who attacks to make money, for example by stealing card details or using ransomware.
nation-state group → A government-backed threat actor with high skill and resources who spies on or disrupts other countries.
A threat actor is described by why they attack (motive) and how able they are (skill). → threat_actor = {motive, skill}
A hacktivist is a threat actor who attacks to support a political or social cause. → hacktivist.motive = "cause"
hacktivist.motive = "money" → Hacktivists are driven by a political or social cause, not money. Money is the motive of cybercriminals.
insider.access = "none" → An insider already has legitimate access, such as a staff member or contractor, so their access is not none.

Key Term

threat actor
A person or group that carries out an attack on a system, described by their motive (why) and skill (how able). Examples: cybercriminals, hacktivists, insiders and nation-state groups.

Fill in the Blanks

1. actor = cybercriminal motive = money
Hint: Type what most cybercriminals are after when they attack.
2. actor = hacktivist motive = protest or a political cause
Hint: Type the name of the threat actor who attacks to make a political or social point.
3. actor = insider access = already inside the organisation
Hint: Type the threat actor who already works within the organisation.
4. actor = nation-state skill = high backing = government
Hint: Type the skill level of well-funded groups backed by a government.
5. threat actor = motive (why) + skill (how)
Hint: Type the word for how able the attacker is, which describes the 'how' of a threat actor.

Spot the Error

Question 1
A actor = "cybercriminal"
B motive = "protest"
C skill = "medium"
D print(actor, motive)
Line B — Cybercriminals are mainly motivated by money, not protest. Line 2 should be motive = "money".
Question 2
A actor = "hacktivist
B motive = "protest"
C skill = "varies"
D print(actor, motive)
Line A — The string is missing its closing quote. It should be actor = "hacktivist".
Question 3
A actor = "nation-state"
B skill = "low"
C motive = "spying"
D print(actor, skill)
Line B — Nation-state groups are well funded and highly skilled. Line 2 should be skill = "high".
Question 4
A actor = "insider"
B access = False
C motive = "revenge"
D print(actor, motive)
Line B — An insider already has legitimate access to the system, so access should be True.
Question 5
A def describe(actor):
B motive = actor["motive"]
C skill = actor["motive"]
D return motive, skill
Line C — The skill variable reads the wrong key, so it would hold the motive. It should use actor["skill"].

Student with a class code? Join your class →