Terrorists threats, where terrorist organizations make use of the Internet in order
to perform the following:
Publicity/advertising and propaganda;
Recruiting and mobilization;
Fundraising;
Secure networking; encrypted / anonymous sharing of information;
Remote training;
Planning and coordination;
Claiming responsibility for attacks, thus showcasing their capabilities as an
intimidation technique;
Using the Internet with continuously improved skills, by flooding the
targets.
Terrorist groups continue to aspire to conduct damaging Cyber activities against
Lebanon.
Hacktivist threats, where activities mainly have a disruptive and criminal
purpose to their victims. Such actors use the Internet with the same purposes as
terrorist organizations.
Insider threats, where these constitute a continuous risk. They are committed by
malicious insiders, who are implicitly “trusted” employees of an organization and
who may have access to critical systems and data. These threats can cause financial
and reputational damage through the theft of sensitive data and intellectual
property. They can also pose a destructive Cyber Threat if they use privileged
knowledge or access to facilitate or launch an attack to disrupt critical services on
the network of their organization or wipe out data from the network.
Some insider threats can be victims of social engineering and thus cause
unintentional damage.
Script kiddies, where inexperienced actors use scripts or tools developed by
others – and/or downloaded from the Internet – to conduct Cyber Attacks. They
generally have access to hacking guides, resources and tools available on the
internet and downloadable from public open sources.
Computer network attack, where hostile actors can use malicious software (or
malware) to disrupt and damage cyber infrastructure. This can range from taking a
website offline to manipulating industrial process command and control systems.
1.3 Trend of threats
The continuous and rapid development of information and communication technologies,
globalization, the tremendous increase in data volumes, and the growing number of
June 2019
LEBANON NATIONAL CYBER SECURITY STRATEGY
14