My Games
Account 🔐
Sign Up
Login
Global Leaderboard
Case Vault
Badge Backpack
Blue Team Glossary
Login and start playing
Leaving so soon?
×
You really want to log out? We were having so much fun!
Home
›
Glossary
›
actor
Actor
Definition
An **actor** is the person, group, or system responsible for an action in a cyber event. In cybersecurity, this most often refers to a **threat actor**, an entity that intentionally attempts to access, disrupt, monitor, or manipulate systems or people without authorization.
Explore More Terms
Pyramid Of Pain
Adx
Password-Spray
Remote-Services-Exploitation
Sha256
Examples & Use Cases
**An actor can be:** * A **person** (e.g., scammer, hacker, stalker) * A **group** (e.g., cybercriminal gang, nation-state team) * A **system** or **tool** acting automatically (e.g., bots, scripts, spyware) **Common Types You’ll Encounter** * **Cybercriminals** – Financially motivated (fraud, phishing, ransomware) * **Insiders** – Someone with legitimate access who causes harm * Can be malicious, careless, or manipulated * **Nation-State Actors** – Government-backed, highly resourced, strategic * **Automated Actors** – Non-human tools executing attacks at scale **Why Actors Matter in Cyber Analysis** Identifying the actor helps analysts: * Understand motivation (money, politics, access, control) * Predict next steps in an attack * Choose the right defensive response Security analysis isn’t just what happened, it’s who did it and why.