Logic bombs are often perpetrated by _________.

Logic bombs are often perpetrated by _________.

• A. disgruntled employees
• B. external hackers
• C. customers
• D. contractors

Answer: (A)

Logic bombs rely on the trusted access of someone inside the organization. A disgruntled employee already has legitimate login and system permissions, so they can conceal a dormant payload and trigger it later when a condition is met (such as a date or a specific event). External hackers, customers, or even contractors do not typically have the same ongoing access and insider positioning, making them less likely to plant a dormant bomb that activates quietly. While contractors could pose an insider risk, the most common scenario is a dissatisfied employee who can introduce the code and control its activation without immediate detection.

Logic bombs rely on the trusted access of someone inside the organization. A disgruntled employee already has legitimate login and system permissions, so they can conceal a dormant payload and trigger it later when a condition is met (such as a date or a specific event). External hackers, customers, or even contractors do not typically have the same ongoing access and insider positioning, making them less likely to plant a dormant bomb that activates quietly. While contractors could pose an insider risk, the most common scenario is a dissatisfied employee who can introduce the code and control its activation without immediate detection.