Page 50 - Cyber Defense eMagazine for August 2021

State-Sponsored Actors

A similar but separate class of cybercriminals is state-sponsored actors. As governments around the
globe rely more heavily on digital technologies, cyberattacks have emerged as a new type of warfare.
Enemy nation-states can employ hackers to cripple critical infrastructure, spread misinformation or
uncover government secrets.

State-sponsored cyberattacks may seem like something out of sci-fi, but they’re already a reality and are
becoming more common. In May, North Korean hackers ran a phishing campaign against South Korean
government officials to steal confidential information. Many experts also suspect that the cybercriminals
behind the massive SolarWinds attack were operating under the Russian intelligence service.

Government organizations and contractors, as well as critical infrastructure, are the most at-risk of these
attacks. Cybercriminals typically use sophisticated techniques, so these operations should adopt high
standards. Tight restrictions like zero-trust security models and vetting all business partners are ideal.
Continuous monitoring is also a good idea since cyber espionage campaigns aim to be as stealthy as
possible and could otherwise slip past defenses.

Fun and Notoriety
Not all cybercriminals are after something significant, be it money or making a statement. As hacking has
risen in prominence, some people have started doing it simply for the fun of it. For these cybercriminals,
infiltrating a system is about the challenge, about accomplishing something they can impress other
hackers with.

Studies show that the brain’s reward systems can react similarly to internet use as they do to drugs. This
phenomenon is the driver behind internet addiction, and it likely plays into this type of cybercrime, too.
For some people, a successful hack gives them a sort of high that they’ll keep chasing.

As technology addictions rise, this type of cybercrime will likely grow, too. Unfortunately, given its lack of
a clear goal, it’s often unpredictable. While these attacks typically don’t cause much damage, they’re
near-impossible to predict but highlight the importance of constant vigilance.

The Psychology of Cyberattack Victims
Understanding the psychological profile of cybercriminals isn’t the only way psychology plays into
cybersecurity. Security professionals must also understand the minds and motivations of those they’re
protecting. That’s because the most successful cyberattacks are often those that take advantage of their
victims’ psychology.

Cyber Defense eMagazine – August 2021 Edition 50
Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.