← WA Computer Science ATAR Unit 2

Threat actor

A person or group that carries out a cyber attack, described by their motive (money, cause, grievance, spying) and skill, such as cybercriminals, hacktivists, insiders and nation-state groups.

Part of: WA Computer Science ATAR Year 11 — Cyber Security — Module 9

Understanding Threat actor in WA Computer Science ATAR Unit 2

What it does: Cybercriminals attack to make money, so the motive that matches this threat actor is money. An insider already has trusted access, and an angry or disgruntled employee is a common motive for misusing it. Hacktivists are driven by a cause or belief. A nation-state group works for a government, usually to spy or disrupt. Hacktivists want to make a political or social point. Cybercriminals want financial gain. The word joins hacker and activist, so the motive is a cause rather than money. The motive for a hacktivist should be a cause, such as a protest, so the line should read motive = "cause".

Common mistakes: Cybercriminals are motivated by money, not a cause. A cause is the motive of hacktivists. The line should be motive = "money". Hacktivists attack to support a political or social cause. Money is the cybercriminal motive. The line should be motive = "cause".

Class: _____________________  ·  Name: _____________________  ·  Date: _________

Free printable worksheet with full answer key — or add this module to a class and your students practise it interactively.

🖨 Print worksheet + answer key Add Threat actor to a class →

This module's key terms are also in a printable crossword (Modules 125–266) and word search (Modules 28–266).

Take this worksheet further — free with Cloodit

Each concept is reinforced from every angle — learned, then applied, then tested.

Learning
Duo
Which best describes a threat actor?
A weakness in a system that could be attackedA person or group that carries out an attack
Matches
actor = "nation-state" motive = "school prank" skill = "low"
↓
Nation-state groups are well funded and highly skilled, and they usually attack for spying or political advantage, not for pranks and not with low skill.
Applying
Meanings
Term
threat actor
Meaning
A person or group that carries out a cyber attack, described by their motive (money, cause, grievance, spying) and skill, such as cybercriminals, hacktivists, insiders and nation-state groups.
Practice
cybercriminal: motive = money
Testing
Gaps
IF actor = THEN
Check Answer
Spots
2skill = "high"
3motive = "cause"

Cloodit turns curriculum-aligned coding content into journeys students work through one biome at a time.

The 'Gila Monster' badge — Patient Coder, one of Cloodit's 106 collectible badges
Students earn collectable badges

Over 100 of them, across seven natural biomes.

Study Buddy
Students build a real study resource

Turns their work into revision material ready for Flash Cards and Exam study.

Diamond Dash — one of Cloodit's live, competitive Sprint games
Students lock in with Sprints

Live, competitive practice for the start of the lesson or a teacher-led lesson finisher.

A Cloodit certificate of achievement, ready to personalise and print
Custom printable certificates

Honour your top performers, or encourage a student who's trying hard — ready to print in seconds.

Add to class →

Quick Questions

1. Which best describes a threat actor?
A. A person or group that carries out an attack ✓
B. A weakness in a system that could be attacked
A threat actor is who carries out the attack. A weakness in a system is a vulnerability, not a threat actor.
2. A group breaks into a retailer's database to steal card numbers and sell them. Which threat actor is this?
A. Hacktivists
B. Cybercriminals ✓
Cybercriminals are mainly motivated by money. Hacktivists attack to support a political or social cause.
3. A group defaces a mining company's website to protest its environmental record. Which threat actor is this?
A. Hacktivists ✓
B. Nation-state group
Hacktivists are driven by a cause or belief. A nation-state group works for a government, usually to spy or disrupt.
4. A threat actor's main motive is described as 'a cause or belief'. Which actor fits?
A. Hacktivist ✓
B. Cybercriminal
Hacktivists want to make a political or social point. Cybercriminals want financial gain.
5. An employee angry about being overlooked for promotion copies customer files before resigning. Which threat actor is this?
A. Nation-state group
B. Insider ✓
An insider already has legitimate access to the organisation's systems. This one acts out of a grievance.

Match the Pairs

threat actor → A person or group that carries out a cyber attack, described by their motive and skill level
hacktivist → A threat actor who attacks systems to support a political or social cause, for example by defacing a website
A cybercriminal is a threat actor whose motive is financial gain, such as selling stolen data or demanding a ransom → actor = "cybercriminal" motive = "money"
An insider is a threat actor who already has legitimate access, and may act from a grievance against their employer → actor = "insider" motive = "grievance"
actor = "nation-state" motive = "school prank" skill = "low" → Nation-state groups are well funded and highly skilled, and they usually attack for spying or political advantage, not for pranks and not with low skill.
actor = "hacktivist" motive = "money" → A hacktivist is driven by a political or social cause, not by profit. Money is the typical motive of a cybercriminal.

Key Term

threat actor
A person or group that carries out a cyber attack, described by their motive (money, cause, grievance, spying) and skill, such as cybercriminals, hacktivists, insiders and nation-state groups.

Fill in the Blanks

1. IF actor = INSIDER THEN motive ← GRIEVANCE END IF
Hint: Type the threat actor type, often someone within the organisation, whose motive is a grievance
2. actor ← CYBERCRIMINAL motive ← MONEY
Hint: Type the motive that drives a cybercriminal
3. actor ← NATIONSTATE skill ← HIGH
Hint: Type the skill level of a well-resourced government-backed group
4. actor ← HACKTIVIST motive ← CAUSE
Hint: Type the threat actor type that attacks to promote a political or social cause
5. actors ← [CYBERCRIMINAL, INSIDER] FOR EACH a IN actors OUTPUT a
Hint: Type the keyword that loops through each item in the list of threat actors

Spot the Error

Question 1
A actor = "cybercriminal"
B skill = "high"
C motive = "cause"
D print(actor, motive, skill)
Line C — Cybercriminals are motivated by money, not a cause. A cause is the motive of hacktivists. The line should be motive = "money".
Question 2
A motive = "money"
B actor = "hacktivist"
C print(actor, motive)
Line A — Hacktivists attack to support a political or social cause. Money is the cybercriminal motive. The line should be motive = "cause".
Question 3
A actor = "insider"
B access = False
C motive = "grievance"
D print(actor, motive)
Line B — An insider already has legitimate access to the organisation's systems, which is why insiders are dangerous. It should be access = True.
Question 4
A actor = "nation-state
B motive = "spying"
C skill = "high"
D print(actor, skill)
Line A — The string is missing its closing quote, which is a syntax error. It should be actor = "nation-state".
Question 5
A actors = []
B actors.append("insider")
C actors.append("hacktivist")
D actors.add("nation-state")
Line D — Python lists have no add() method. Items are added to a list with append(), so it should be actors.append("nation-state").

Student with a class code? Join your class →