Which term describes a threat actor who uses hacking and computer fraud for commercial gain?

Which term describes a threat actor who uses hacking and computer fraud for commercial gain?

• A. Organized crime
• B. Internal threat
• C. Shadow IT
• D. Unauthorized

Answer: (A)

Motive and organizational structure define threat actor types in cybersecurity. When hacking and computer fraud are pursued specifically for commercial gain, the actor is best described as organized crime. These groups operate like traditional criminal organizations: they have a defined hierarchy, coordinated operations, and a clear profit motive. Their methods are chosen for repeatable financial impact, such as fraud schemes, ransomware, or phishing campaigns, aimed at extracting money or valuable data. Other terms describe different dynamics. An internal threat comes from someone inside the organization who misuses access or data, often driven by personal factors rather than a criminal enterprise. Shadow IT refers to unsanctioned technology usage, not a particular attacker profile. Unauthorized describes actions—access or activity without permission—rather than a sustained, organized actor with a profit agenda. So the term that best fits is organized crime, because it captures both the profit-driven motive and the organized, collaborative approach typical of cybercriminal networks.

Motive and organizational structure define threat actor types in cybersecurity. When hacking and computer fraud are pursued specifically for commercial gain, the actor is best described as organized crime. These groups operate like traditional criminal organizations: they have a defined hierarchy, coordinated operations, and a clear profit motive. Their methods are chosen for repeatable financial impact, such as fraud schemes, ransomware, or phishing campaigns, aimed at extracting money or valuable data.

Other terms describe different dynamics. An internal threat comes from someone inside the organization who misuses access or data, often driven by personal factors rather than a criminal enterprise. Shadow IT refers to unsanctioned technology usage, not a particular attacker profile. Unauthorized describes actions—access or activity without permission—rather than a sustained, organized actor with a profit agenda.

So the term that best fits is organized crime, because it captures both the profit-driven motive and the organized, collaborative approach typical of cybercriminal networks.