An individual or group responsible for carrying out a cyberattack or malicious activity.
Understanding different types of threat actors — nation-states, organized crime, hacktivists, insiders — helps defenders reason about likely motivations and tactics.