Ransomware Reconnaissance Risk Script kiddie Social engineering Spear phishing Threat Agent Threat Vector User malware, or share sensitive information, with an unknown third party. Malicious software that denies the user access to their files, computer or device until a ransom is paid. The phase of an attack where an attacker gathers information on and maps networks, as well as probing them for exploitable vulnerabilities in order to hack them. The potential that a given cyber threat will exploit the vulnerabilities of an information system and cause harm. A less skilled individual who uses ready-made scripts, or programs, that can be found on the Internet to conduct cyberattacks, such as web defacements. The methods attackers use to deceive and manipulate victims into performing an action or divulging confidential information. Typically, such actions include opening a malicious webpage, or running an unwanted file attachment. Spear phishing is a cyber-attack that spoofs emails to gain unauthorised access to sensitive information by targeting specific individuals or organisations. This practice is often referenced alongside other attack vectors as social engineering. A Threat Agent is a group or named organisation that is judged to be hostile to Jordanian Government interests. Threat agents are quantified and profiled by intent, capability and perseverance. A Threat Vector is a method that may be used by threat agents to attack the organisation. A threat vector may exploit multiple vulnerabilities, both physical and logical, in order to leverage an attack. A person, organisation entity, or automated process, that accesses a National Cyber Security Strategy 2018-2023 .ٍٜٞ‫ؽشف ػخُغ ٓـ‬ ٍٞ‫ؼش طٔ٘غ حُٔغظخذّ ٖٓ حُذخ‬٤‫خص خز‬٤‫رشٓـ‬ ‫ٖ دكغ‬٤‫ ُل‬ٙ‫خص‬ٜ‫ ؿ‬ٝ‫ أ‬ٚ‫ر‬ٞ‫ كخع‬ٝ‫ أ‬ٚ‫ ِٓلخط‬٠ُ‫ا‬ ‫ش‬٣‫كذ‬ ‫ثشِجُبد اٌفذَخ‬ ‫خؿْ رـٔغ‬ُٜٔ‫خ ح‬ٜ٤‫ّ ك‬ٞ‫و‬٣ ّٞ‫ـ‬ُٜ‫ٓشكِش ٖٓ ح‬ َ‫ط‬ٞ‫خ ُِظ‬ٜ‫ٓغل‬ٝ ‫ٓخص ػٖ حُشزٌخص‬ِٞ‫حُٔؼ‬ ‫خ‬ٜ٤‫ ٗوخؽ حُؼؼق حُوخرِش ُالعظـالٍ ك‬٠ُ‫ا‬ .‫خ‬ٜ‫خؿٔظ‬ٜٓ ‫خص‬٣‫ُـخ‬ ‫االعزطالع‬ ٍ‫ ٓلذد رخعظـال��٢ٗ‫زشح‬٤‫ذ ع‬٣‫ذ‬ٜ‫خّ ط‬٤‫ش ه‬٤ُ‫حكظٔخ‬ ‫اُلخم‬ٝ ‫ٓخص‬ِٞ‫ ٗظخّ ٓؼ‬٢‫ٗوخؽ حُؼؼق ك‬ .‫حُؼشس‬ ‫اٌخطش‬ ّ‫غظخذ‬٣ٝ ‫خسحص‬ُٜٔ‫ظٔظغ روذس ٖٓ ح‬٣ ‫شخض‬ ‫س‬ٞ‫ٌٖٔ حُؼؼ‬٣ ‫ضس‬ٛ‫ رشحٓؾ ؿخ‬ٝ‫طخ أ‬ٞ‫ٗظ‬ ‫ـٔخص‬ُٜ‫ حإلٗظشٗض ُشٖ ح‬٠ِ‫خ ػ‬ٜ٤ِ‫ػ‬ .‫ـٔخص حُشزٌش‬ٛ َ‫ش ٓؼ‬٤ٗ‫زشح‬٤‫حُغ‬ ‫هبوش إٌصىص‬ )‫اٌجبهضح (ِجزذئ‬ ‫ٕ ُخذحع‬ٞٔ‫خؿ‬ُٜٔ‫خ ح‬ٜٓ‫غظخذ‬٣ ٢‫حُطشم حُظ‬ ٝ‫خّ رلؼَ ٓخ أ‬٤‫ ُِو‬٠ِ‫ْ ػ‬ِٜٔ‫ك‬ٝ ‫خ‬٣‫حُؼلخ‬ ‫ػخدس ٓخ‬ٝ ،‫ش‬٣‫ٓخص عش‬ِٞ‫ ٓؼ‬٠ِ‫ٍ ػ‬ٞ‫حُلظ‬ ‫ؼش‬٤‫طشَٔ طِي حألػٔخٍ كظق طللش اٗظشٗض خز‬ .‫د‬ٞ‫ش ٓشؿ‬٤‫َ ٓشكن ُِٔق ؿ‬٤‫ طشـ‬ٝ‫أ‬ ‫اٌهٕذعخ االجزّبػُخ‬ ‫ذ‬٣‫ظٔؼَ ربسعخٍ سعخثَ رش‬٣ ٢ٗ‫زشح‬٤‫ّ ع‬ٞ‫ـ‬ٛ ٢ٗٞٗ‫ش هخ‬٤‫ٍ رشٌَ ؿ‬ٞ‫ط‬ُٞ‫ روظذ ح‬٢ٗٝ‫اٌُظش‬ ‫ذحف‬ٜ‫ٓخص كغخعش ٖٓ خالٍ حعظ‬ِٞ‫ ٓؼ‬٠ُ‫ا‬ ٠ُ‫ُشخس ا‬٣ ‫ ؿخُزخ ٓخ‬.‫ ٓئعغخص ٓلذدس‬ٝ‫أكشحد أ‬ ‫ـٔخص‬ُٜ‫ ح‬٢ٜ‫ؿ‬ٞٓ ‫ ؿخٗذ‬٠ُ‫ ا‬-َٔ‫زح حُؼ‬ٛ ‫ش‬٤‫٘ذعش حالؿظٔخػ‬ُٜ‫ رٔظطِق ح‬-ٖ٣‫خش‬٥‫ح‬ ٌٍ‫اٌزصُذ االدزُب‬ ‫ش ُٔظخُق‬٣‫ ٓ٘ظٔش طؼظزش ٓؼخد‬ٝ‫ػش أ‬ٞٔ‫ٓـ‬ ‫ذ‬٣‫ذ‬ٜ‫ حُظ‬ِٞ‫ُظ٘ق ٓٔؼ‬٣ٝ ،‫ش‬٤ٗ‫ٓش حألسد‬ٌٞ‫حُل‬ .‫ـٔخص‬ُٜ‫طٌشحس ح‬ٝ ‫حٌُلخءس‬ٝ ‫خ‬٣‫ح‬ُِٞ٘ ‫كوخ‬ٝ ‫جهبد اٌزهذَذ‬ ‫ذ‬٣‫ذ‬ٜ‫خ ٓٔؼَ حُظ‬ٜٓ‫غظخذ‬٣ ٕ‫ٌٖٔ أ‬٣ ‫وش‬٣‫ؽش‬ ٍ‫ ًزُي حعظـال‬ٌٚ٘ٔ٣ٝ .‫خؿٔش ٓئعغش‬ُٜٔ ٖ‫ش ُش‬٤‫حُٔ٘طو‬ٝ ‫ش‬٣‫ٗوخؽ حُؼؼق حُٔظؼذدس حُٔخد‬ .ّٞ‫ـ‬ُٜ‫ح‬ ‫ِىجّه اٌزهذَذ‬ ‫ش‬٤ِٔ‫ حُؼ‬ٝ‫ حُٔ٘شؤس أ‬ٝ‫ حُٔئعغش أ‬ٝ‫حُشخض أ‬ ّ‫ حُ٘ظخ‬٠ُ‫ٍ ا‬ٞ‫ّ رخُذخ‬ٞ‫ طو‬٢‫ش حُظ‬٤ٌ٤‫ٓخط‬ٞ‫ط‬ٝ‫حأل‬ َ‫اٌّغزخذ‬ Page 28 of 29 2023 – 2018 ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫حالعظشحط‬