How do you differentiate between a state-sponsored threat actor and a financially motivated cybercriminal in terms of tactics?
