ABSTRACT
Cyber-attacks are instigated by people. A target is chosen based on the perceived characteristics of the intended victims, and decisions are made about how the attack is to be conducted. The reaction of the target may then influence what, if any, subsequent decisions are made by the attackers. As such, psychological factors are an important determinant of how and why cyber-attacks take place. This chapter explores the varying motivations that attackers may have and how this shapes, and is in turned shaped by, their sense of self-identity. As will be discussed, attackers often work as part of a group. Being a member of a group influences our behaviour in ways that are often greater than we realise. There are parallels with participation in group-based cybercrime and offline criminal acts such as gang activity. At the same time, involvement in hacking groups can be an important source of social support and self-identity to people and does not necessarily equate to taking part in criminal behaviour. This creates both challenges and opportunities in understanding how to address cybersecurity challenges, including empowering people to make informed decisions about their participation in cybercrime.
