Topic: Security+ Domain 1 — Threat Actors, Attack Types, and Malware Fundamentals

❓ Essential Question

How do different threat actors and attack types work, and what clues help a security professional identify them?

⭐ Key Ideas

• Threat actors have different motivations and capabilities.
• Malware comes in distinct forms that behave differently.
• Attacks follow patterns (social engineering, technical, physical).
• Understanding “how the bad guy thinks” is key to defense.
• Security+ tests recognition, not deep technical exploitation.

🔑 Vocabulary

Threat Actor — The person or group causing the attack.

APT — Advanced Persistent Threat; nation-state or elite group.

Malware — Malicious software designed to harm systems.

Attack Vector — The path an attacker uses to enter a system.

Phishing — Tricking users into giving information.

Ransomware — Malware that encrypts files for payment.

Botnet — Network of infected devices controlled by an attacker.