Cyber Threat Research Taxonomy Overview

This document is a technical report detailing the Arkose Cyber Threat Intelligence Research (ACTIR) Unit's taxonomy for categorizing cybersecurity threats. It outlines two primary categories of bots: Basic Bots, which perform simple tasks, and Intelligent Bots, capable of complex interactions. The taxonomy classifies threats into volumetric attacks, typically executed by malicious bots, and low-and-slow attacks, often carried out by human fraud farms. The report identifies five goals of creating this taxonomy, including establishing a coherent vocabulary for understanding cyber threats and facilitating effective communication within the threat intelligence community. Additionally, it categorizes threat actors into four profiles based on their technical skills: Amateur, Professional, Maverick, and Nation State. The document further describes five cybercrime business models, emphasizing the financial motivations behind these activities and the evolution of attack methods, including the emergence of mobile device farms and hybrid attacks. The report aims to enhance understanding and response strategies against these evolving cyber threats.