A hybrid threat actor is an individual or group that combines cyberattacks with other forms of disruptive activities, such as disinformation campaigns, physical sabotage, or traditional espionage. These actors often blend techniques from cybercrime, hacktivism, and state-sponsored operations to achieve their objectives, making attribution and defense more challenging. Hybrid threat actors may operate independently or be backed by nation-states, and their actions can target governments, critical infrastructure, businesses, or the general public. Their multifaceted approach increases the complexity and impact of their operations, posing significant risks to national security, economic stability, and public trust.