53. Which of the following threat actors would most likely target an organization by using a logic bomb within an internally-developed application?
Answer: B
Trusted insiders are the most likely threat actors to use a logic bomb in an internally-developed application.
Trusted insiders have the necessary access and knowledge about the organization's systems, making them well-positioned to deploy a logic bomb. This type of malicious code is typically hidden within applications, which trusted employees are more likely to develop or maintain.
A) Nation-state
While nation-state actors are highly skilled and may use sophisticated methods to infiltrate organizations, they typically focus on broader strategic goals such as espionage or disruption rather than using logic bombs embedded in internally-developed applications. Their approach usually involves larger-scale attacks rather than targeting specific internal systems in such a covert manner.
B) Trusted insider
Trusted insiders are individuals within the organization, such as employees or contractors, who have legitimate access to systems and applications. Their insider knowledge allows them to implement a logic bomb effectively, as they understand how to conceal it within existing code, making them the most likely actors to execute this type of attack.
C) Organized crime group
Organized crime groups tend to focus on financial gain through methods such as ransomware or data theft rather than subtle attacks like logic bombs. While they may exploit vulnerabilities, they are less likely to engage in the nuanced approach required to insert a logic bomb into an internally-developed application.
D) Hacktivist
Hacktivists typically target organizations to promote a political agenda or social change, often through visible acts of protest or disruption. Their methods are usually overt and aimed at garnering attention, which makes them less likely to use stealthy tactics like a logic bomb embedded within an internal application.
Conclusion
The most plausible threat actor to utilize a logic bomb in an internally-developed application is a trusted insider, given their access and familiarity with the organization's systems. Other options, including nation-states, organized crime groups, and hacktivists, either lack the necessary access or would employ more overt tactics that do not align with the stealthy nature of a logic bomb attack.