Unskilled Attacker (Script Kiddie) Explained: Threat Actors for Security+
CompTIA lists unskilled attacker — the term that replaced script kiddie — as one of the named threat actor types on the Security+ exam. Both terms describe the same thing: someone who uses attack tools written by other people without understanding how they work. The defining characteristic is low capability, not low danger. The tools they borrow were written by people who were very capable indeed. That distinction is the one exams test, and it is the one most often misunderstood. An unskilled attacker running a downloaded exploit kit against an unpatched server compromises it just as thoroughly as an expert would. The skill gap affects what they can attempt , not how much damage results when the attempt succeeds. Profiling the Threat Actor CompTIA characterizes every threat actor by four attributes, and you should be able to place each type on all four. Sophistication and capability: low. They use existing tools, scripts, and exploit kits. They do not write exploits, disc...