Tier 3
Organized cybercrime
Resources / capability
Well-resourced — BEC at scale, sophisticated ransomware ops, data theft for resale on dark markets.
Typical targets
Financial gain at scale. Financial services, retail, large enterprise.
Most relevant defenses
- identity / ITDR
- email / BEC defense
- DSPM / DLP
- MDR
- SIEM / SOC
Note · Where most named ransomware crews sit. Modern affiliates blur the line into nation-state TTPs.