Which threat actor type is most associated with financial gain or ransomware?

• A. Organized Crime
• B. Hacktivists
• C. Script Kiddies
• D. Nation-state/APT

Answer: (A)

Financial gain drives organized crime groups, and ransomware is a direct money-making method they use. These actors run ransomware campaigns as a business: they recruit affiliates, monetize payments, and scale operations to maximize profits, often using double extortion and other monetization tricks. Hacktivists are motivated by political or social causes, not profit. Script kiddies are typically low-skill actors seeking quick notoriety rather than sustained criminal enterprise. Nation-state or APT groups focus on espionage, strategic disruption, or influence, not primarily on monetary ransom profits. Thus, ransomware and financial gain align best with organized crime.