bad actor

a person or group who actively seeks to break computer security, compromise applications, or steal data for malicious purposes. Sometimes called hacking, but hackers but or may not have good intentions.