51 terms
Fraud, espionage, and hacktivism terms
Fraud, espionage, and hacktivism represent three of the most disruptive threats online — each with its own goals, tactics, and impact. Fraud targets individuals through deception, espionage steals information in secret, and hacktivism uses cyberattacks to make a political statement. These terms help you understand how such threats work — and how to spot them before they cause damage.
Orange hat hacker
An orange hat hacker is an individual who blends elements of both ethical and unethical hacking practices in ways that are situationally ambiguous.
Pink hat hacker
A pink hat hacker refers to a hacker who uses their hacking skills primarily to support social causes, raise awareness about important issues, or advocate for particular movements.
Fraud: A definitive guide
Fraud is the intentional act of deception to gain a benefit, whether for an individual or an institution.
EMV chip
An EMV chip is a small microprocessor embedded in credit and debit cards that securely stores and processes payment data.
Address verification service
Address verification service (AVS) refers to a tool used to validate a postal address provided by the customer and reduce errors in shipping and billing.
Operation Shady Rat
Operation Shady RAT is a sophisticated cyber espionage campaign uncovered by McAfee in 2011.
LulzSec
LulzSec (Lulz Security) refers to a hacktivist group known for its high-profile cyber attacks on the CIA, PBS, Fox, Sony, and the UK’s Serious Organised Crime Agency (SOCA).
Warez
Warez is a term for pirated digital items, such as software, movies, music, and games, that cybercriminals distribute without the permission of the creators.
Velocity checks
Velocity checks are a security and fraud prevention technique that tracks the frequency of specific transactions or activities within a system.
Threat actor
A threat actor is an organization or an individual with malicious intent who wants to take advantage of weaknesses in a computer system to access data, devices, systems, and networks without users’ consent.
Software piracy
Software piracy is using, distributing, or reproducing computer software without respecting copyright laws or license restrictions.
Softlifting
Softlifting is the act of installing or sharing a legally obtained copy of software in a way that goes against its license agreement.
Script Kiddie
Script kiddie refers to amateur hackers who use existing software for malicious purposes.
RedHack
RedHack is a computer hacker group from Turkey founded in 1997.
Red hat hacker
A red hat hacker is a hacker who acts as a digital activist or a vigilante and uses their hacking knowledge to convey a message.
Initial fraud alert
An initial fraud alert can be described as a measure used to protect individual users from potential fraud and identity theft.
Initial access brokers
Initial access brokers (IABs) are individuals or groups who specialize in breaking into business networks.
Hacktivism
Hacktivism refers to hacking into a system for political or social purposes, such as human rights, free speech, and freedom of information.
Green hat hacker
A green hat hacker is a hacker who is focused on learning and developing their skills.
Fraud as a Service
Fraud as a Service is a business model where people sell services to cybercriminals.
False flag
A false flag is a cyberattack tactic where attackers try to pin the blame on someone else.
Exploit-as-a-service
Exploit-as-a-service (EaaS) refers to a model where cyber attackers provide ready-to-use exploits or hacking tools as a service such as zero-day vulnerabilities.
Enterprise Fraud Management (EFM)
Enterprise Fraud Management (EFM) is a system for detecting and preventing fraud to protect an organization's assets, customers, and reputation.
Electronic intelligence
Electronic intelligence (ELINT) refers to collecting and analyzing electronic signals from radar systems and communication networks.
Digital piracy
Digital piracy refers to the illegal act of copying, distributing, or using digital content without authorization or payment.
Dark web
The dark web is a part of the internet that is hidden and not accessible on mainstream search engines (like Google or Bing).
Cyberwarrior
A cyberwarrior refers to an individual who participates in cyberwarfare, motivated either by personal, patriotic, or religious reasons.
Cyberterrorism
Cyberterrorism refers to the use of computer technology to attack and terrorize people, companies, and countries.
Cyberstalking
Cyberstalking is a type of harassment in which the perpetrator uses technology and digital means like location trackers, email, and social media in order to harass, stalk, and monitor their victims.
Cyberlibel
Cyberlibel is the act of spreading false information about another person, group, or organization through a computer network.
Cybercriminal
A cybercriminal is an individual who commits cybercrimes — criminal acts that involve information technologies (IT) either as a means or as a target.
Cyber warfare
Cyber warfare is a broad term that includes uses of various cyber tools to cause harm and disrupt computer systems and infrastructure of an enemy state.
Cyber vigilantism
Cyber vigilantism refers to the actions of individuals or groups to combat and expose perceived online wrongdoing or cybercrimes outside the traditional legal system.
Cyber privateering
Cyber privateering refers to cyber attacks that involve state-sponsored cyber operations carried out by non-state actors.
Cyber operations
Cyber operations encompass a range of actions executed within the digital realm to safeguard, secure, or target computer networks, systems, or information.
Cyber harassment
Cyber harassment is a tactic used to repeatedly offend, annoy, attack, threaten, or verbally abuse a victim using digital means with the intention to cause distress and harm.
Cyber espionage
Cyber espionage is the practice of using digital means to access and obtain secrets and information without authorization.
Cracker
A cracker is a person who breaks into computer systems, often with malicious intent.
Code monkey
Code monkey is a slang term for a programmer or developer who is seen as someone who writes code quickly and without much thought or creativity.
Clicktivism
Clicktivism is using social media and the internet in general to advocate for social causes.
Clean fraud
Clean fraud, also called “friendly fraud,” happens when someone buys something with their real credit card, then says they didn't buy it to get the money back.
Card purchase authorization
Card purchase authorization is a security process during which a card-issuing bank approves or declines a transaction initiated by the cardholder.
Blue hat hacker
A blue hat hacker is someone from a sub-group of white hat hackers who are hired externally by companies to perform penetration testing and sniff out bugs and vulnerabilities before a big launch.
Black hat hacker
A black hat hacker is someone who uses their hacking knowledge to perform illegal or criminal activities.
Auction fraud
Online auction fraud is any type of fraud that takes place on online marketplaces or auction sites.
Anti-fraud system
An anti-fraud system is a system to find, prevent, and deal with fraud.
Anonymous hackers
Anonymous hackers are an organized group of political activists who often engage in hacktivism.
Adversary group naming
In cybersecurity, adversary group naming is the practice of assigning specific names (or labels) to organized groups of cybercriminals or malicious hackers.
Abandonware
Abandonware is software that has been abandoned by its copyright holders, typically because the latter ceased to exist or shifted their focus to other titles.
The importance of fraud, espionage, and hacktivism terminology
Understanding these terms helps you stay a step ahead of online threats that are often designed to confuse or mislead. When you know how fraud, espionage, and hacktivism work — and what they’re called — it becomes easier to spot suspicious activity, and avoid being manipulated or exploited.
Spot threats that are designed to trick you
When you understand what phishing, baiting, or pretexting are, it’s easier to avoid scams that rely on urgency or manipulation.
Make sense of serious breaches
Terms like “exfiltration” or “supply chain attack” describe how sophisticated intrusions happen, and knowing them makes it easier to grasp how systems get compromised.
Talk clearly about what you’re seeing
If something goes wrong, having the right vocabulary means you can describe it accurately — to a colleague, support agent, or security team.
Online security starts with a click.
Stay safe with the world’s leading VPN
Explore related articles
Explore related glossary categories
Can’t find an answer to your question?
Ask the questions that matter to you — and get answers from our cybersecurity experts.