'hackers always wear hoodies'

There is no visual type, and the stock photograph has done real damage to how people think about this.

The categories that matter are insider misuse, organised crime, state operations and opportunists, and none of them look like anything. The imagery encourages thinking about attackers as outsiders and as individuals, when a substantial proportion of harm comes from people who already have legitimate access.

Checked against the primary source.

More on Threat actors and ATT&CK