A financial institution is asking a penetration tester to determine if collusion capabilities to produce wire fraud are present. Which of the following threat actors should the penetration tester…

An insider threat actor represents employees or contractors who abuse legitimate, authorized access to commit crimes such as wire fraud; collusion specifically implies coordination between multiple individuals within the organization who exploit their trusted positions. This model best reflects the scenario of internal actors conspiring to manipulate financial systems, which is the exact capability the penetration tester is asked to assess.

Nation-state actors are motivated by geopolitical goals such as espionage or critical infrastructure disruption, not internal financial collusion schemes.

Script kiddies are low-skill actors relying on pre-built tools and lack the internal access or sophistication required to orchestrate coordinated wire fraud collusion.

Cybercrime organizations typically operate as external threat actors targeting organizations from outside, rather than through insider collusion using legitimate internal access.