Skills & Training: Medium - High
Resources: Medium - High
Risk Appetite: Low
Description: Studious, pacient, specific targets, looking for bloaty corps/orgs that can provide a big ransom.
- Financial gains
- Staked out, major corporations that can deliver high returns (banks, financial institutions)
- Custom exploits
- Zero-day exploits
- Insider threats
- Dedicated study of target environment (technologies, employees, attack surface)
- Supply chain compromise
- Social engineering
- Monetization (ransomware)
- Persistence
- Exfiltration
- Lateral
- Advanced C2 and detection evasion