Understanding Cyber Threat Actors: A Review on Classification, Motivations, and Behavioral Profiling
摘要
The rise in criminal activities within cyberspace underscores the shortcomings of current oversight mechanisms. Malicious actors, ranging from individual hackers to organized groups, exploit their technological skills for personal gain or disruptive ends. While cybersecurity initiatives prioritize strengthening systems, legal responses to cybercrime fall under the jurisdiction of law enforcement. Effective investigations hinge on securing digital evidence, recognizing that cybercrimes are primarily driven by human actions, as evidenced by socially engineered attacks. Recent perspectives advocate for profiling the individuals behind cyber threats, emphasizing the integration of psychological insights into cybersecurity strategies. This study examined relevant literature concerning the classification, characteristics, motivations, and profiling of threat actors. This underscores the need for a comprehensive approach that merges cyber behavioral analysis with robust digital forensics, guiding proactive law enforcement strategies against cybercrime. Additionally, there is an urgent call for the development of a formal Behavioral Analysis Framework (BAF) to enhance the accuracy of cybercriminal profiling.