Does it actually matter who the threat actor is, as the boundaries between criminal and state players become increasingly blurred?
An analysis of threat activity and behaviour across 4,400 companies by the Secureworks Counter Threat Unit (CTU) has concluded that any assumption that nation-state-sponsored Advanced Persistent Threats (APTs) are ‘dimensionally different’ from advanced cybercrime threats is now fundamentally flawed. In other words, the boundary between nation-state and cybercriminal actors is increasingly becoming blurred to the point of being so fuzzy as to be almost irrelevant. Or is it?