What motivates non-state cyber actors?

• A. Profit, notoriety, and disruption.
• B. Ideology and humanitarian aims.
• C. Compliance with legal norms.
• D. Public service delivery.

Answer: (A)

Non-state cyber actors are mainly driven by practical incentives tied to gain and reputation. Profit is a major driver: ransomware payments, theft of financial data, selling access to networks, and monetizing stolen information are all common ways to convert illicit actions into money. Notoriety also matters in the cybercrime ecosystem; gaining recognition can help attract accomplices, command higher ransoms, or secure more lucrative opportunities in future attacks. Disruption is appealing because causing outages or degrading services can pressure victims to respond quickly, negotiate, or capitulate to demands, and it can amplify an attacker’s leverage or influence.

While some non-state actors do pursue ideological or humanitarian aims, those motivations are not the broad, prevailing pattern for non-state cyber activity. Compliance with legal norms isn’t typically a motivator for actors who operate outside the law, and public service delivery isn’t a goal of criminal or opportunistic cyber groups.