{"id":379602,"date":"2026-10-02T01:24:00","date_gmt":"2026-10-02T08:24:00","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/en\/?p=379602"},"modified":"2026-10-02T01:24:23","modified_gmt":"2026-10-02T08:24:23","slug":"intel-471-releases-findings-cybercriminals-recruit-employees-as-on-demand-insiders","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/intel-471-releases-findings-cybercriminals-recruit-employees-as-on-demand-insiders\/","title":{"rendered":"Intel 471 releases findings: cybercriminals recruit employees as on-demand insiders"},"content":{"rendered":"

Intel 471<\/strong> has released new findings today showing that cybercriminals are trying to recruit employees for insider access. The cyber threat intelligence company says the report points to a criminal market for data lookups, account resets, transaction approvals, shipment changes, and SIM swaps.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"Malwarebytes\r\n <\/div>\r\n
\r\n Malwarebytes Anti-Malware<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n\n

The company reviewed 85 underground records<\/strong>. Of those, 45 involved attempts to recruit insiders. Another 15 claimed insider capability, including 11 direct-access claims, and 12 advertised services powered by insider help. The takeaway is hard to miss: many attackers would rather pay someone on the inside than break in from the outside.<\/p>\n\n

Some industries showed up more often than others. Transportation<\/strong> appeared in 19 leads, technology in 17, and telecommunications in 15. Another 26 leads were tagged as multi-sector or unclear. If your team handles valuable data, payments, logistics, or account controls, this report deserves a look.<\/p>\n\n

Intel 471 also says the recruiting methods have widened. They now include public posts<\/strong>, direct outreach, referrals, brokers, partnership offers, deception, and even attempts to get people hired at target companies. The pay structures vary just as much, from per-action fees and one-time sales to commissions, revenue shares, and longer-running deals backed by escrow, staged payments, and checks.<\/p>\n\n

The findings arrive alongside broader industry reports showing the same trend. Seventy-six percent<\/strong> of organizations say insider threats are increasing, average annual costs reached $17.4 million in 2025, incidents take 81 days to contain, and malicious insiders account for 25% to 27% of cases.<\/p>\n\n

For more detail on dark web and Telegram<\/a> recruitment, you can read Intel 471\u2019s full report<\/strong>.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"Google\r\n <\/div>\r\n
\r\n Google Authenticator<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"

Intel 471 has released new findings today showing that cybercriminals are trying to recruit employees for insider access. The cyber threat intelligence company says the report points to a criminal market for data lookups, account resets, transaction approvals, shipment changes, and SIM swaps. The company reviewed 85 underground records. Of those, 45 involved attempts to … Continue reading “Intel 471 releases findings: cybercriminals recruit employees as on-demand insiders”<\/span><\/a><\/p>\n","protected":false},"author":9349,"featured_media":379601,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-379602","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/379602","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9349"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=379602"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/379602\/revisions"}],"predecessor-version":[{"id":379603,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/379602\/revisions\/379603"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/379601"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=379602"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=379602"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=379602"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=379602"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=379602"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=379602"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}