Post by ThreatMon End-to-End Intelligence

Not every threat actor is motivated by money. Some want recognition. Some want status. Some want access. And some simply want to prove they can do something others can't. Financial gain is, of course, a significant factor in cybercrime. However, if you look closely at underground communities, reputation is often equally valuable. In some cases, actors are willing to spend time, money, and resources simply to make a name for themselves. This is one of the reasons why we need to analyze the behaviors, motivations, and dynamics that shape underground communities, as well as the tools and techniques used by threat actors. Understanding what drives an actor can often provide context that technical indicators alone cannot. The tools explain the attack. Motivation helps explain the actor behind it.