Threat actors

People or groups that carry out, or plan, malicious cyber activity.

Covers the people and groups who carry out or plan malicious cyber activity. The potential harms and attack types themselves are under Cyber threats; harm from people with legitimate access who misuse it is Insider threats.