Sophisticated probes against the dam SCADA vendor portal appear aimed at long-term intelligence collection and show high funding and custom tooling. Which threat-actor profile best fits?
Select an answer to reveal the explanation.
Short Explanation
When the tooling looks custom, the funding looks deep, and the target is critical infrastructure for intelligence—not pocket change—you are looking at nation-state territory. That profile is a world apart from a bored script kid rattling default passwords. Match capability and motive before you size the response.
Full Explanation
Nation-state threat actors typically possess substantial resources, advanced capabilities, and strategic motivations such as espionage or geopolitical advantage. High-sophistication probing of industrial vendor portals fits that profile better than unskilled password spraying, accidental shadow IT, or low-skill personal revenge. Correct classification drives proportionate detection and hardening priorities.