Threats from state and non-state actors target the same individuals and entities frequently, but not in every case, and the tools necessary to respond to the two types of threats overlap but are not the same.
Threats from non-state actors commonly emerge from the types of harassment that typically come to mind with the term “online harassment,” but their effects go far beyond those often implied by this term, and include myriad concrete harms and physical dangers. These threats include threats to advocates’ accounts and public image, such as hacking, phishing, and impersonation; threats to their data and privacy, such as doxxing and leaking; threats to their well-being, such as threats, harassment, and dogpiling; and threats that cross the barrier between online and offline.
These attacks arise from coordinated groups of antagonistic individuals without direct access to the power of the state, but with significant technical expertise, organized numbers, and a lot of time on their hands. Between 2014 and 2021, many of these attacks were organized and carried out on a now-defunct platform called Kiwifarms; now, this organizing occurs on other social media and message board sites and encrypted messaging apps such as Telegram.
Non-state actor threats often result from distributed campaigns of mass public communication targeted at an individual or group, resulting in decentralized and difficult-to-predict acts of terror and violence from the public against that individual or group.