Inside the Dark Web Job Market
A Shift in the Employment Landscape
Kaspersky Digital Footprint Intelligence recently released a report titled Inside the Dark Web Job Market: Their Talent, Our Threat. The findings reveal a startling trend: the number of résumés and job postings in underground forums has dramatically surged, doubling in the first quarter of 2024 compared to the same period in 2023. This increase has stabilized through the first quarter of 2025, with résumés now outnumbering job vacancies by 55% to 45%. This shift can largely be attributed to widespread layoffs and a growing influx of younger candidates entering the job market.
Youth in Demand
An interesting aspect of this job market is the profile of its candidates. The average job seeker on these underground platforms is just 24 years old, with a significant number of applicants still in their teenage years. This demographic trend highlights a concerning reality where young individuals are drawn to opportunities, often without a full understanding of the risks involved.
Nature of Opportunities on the Dark Web
The roles advertised on dark web forums predominantly revolve around cybercrime or other illicit activities, although some legitimate positions do exist. Kaspersky’s research points to a shadow economy where 69% of job seekers do not specify a preferred field, indicating a willingness to accept various types of work—from coding and scams to high-stakes cyber operations. The most sought-after positions reveal the complexity of this underground environment and include the following:
- Developers (17% of vacancies): Responsible for creating attack tools and resources.
- Penetration Testers (12%): Tasked with probing networks for vulnerabilities.
- Money Launderers (11%): Specialists in cleaning illicit funds through complex transaction layers.
- Carders (6%): Focused on stealing and monetizing payment information.
- Traffers (5%): Involved in directing victims to phishing sites or infected downloads.
Gender Dynamics in the Dark Web Job Market
The report also uncovered distinctive patterns tied to gender in this illicit job market. Female applicants often sought roles related to interpersonal skills, including positions in customer support and technical assistance. In contrast, male applicants were more inclined to pursue technical and financial-crime roles, such as developers and money mules.
Earnings Potential in Illicit Roles
Salaries for roles within this underground economy vary considerably based on specialization. Notably, reverse engineers stand out as the highest earners, averaging over $5,000 per month, followed by penetration testers at around $4,000 monthly. In contrast, developers can expect salaries of about $2,000. Meanwhile, those engaged in fraud-related activities often earn a percentage of their team’s total income, with money launderers averaging around 20%, while carders and traffers can see their earnings climb to as much as 50%.
A Dangerous Allure
Alexandra Fedosimova, a Digital Footprint Analyst at Kaspersky, emphasizes the dangers of this shadow job market. She notes that it is appealing not just to the unemployed but also to underage and overqualified individuals. Many newcomers mistakenly believe the dark web functions similarly to the legal job market, where skills are prioritized over formal qualifications. However, the potential legal consequences of working in this environment can be severe and long-lasting.
Guiding Youth Towards Safer Paths
Young individuals contemplating employment on the dark web must recognize that the allure of quick earnings carries significant legal and reputational risks. It’s crucial for parents, educators, and community members to remain vigilant—reporting any suspicious online solicitations immediately. Encouraging children to explore legitimate career paths, particularly within the tech sector—such as cybersecurity—can provide them with sustainable opportunities for growth.
Recommendations for Safety
Kaspersky offers several practical recommendations for both individuals and organizations to navigate this complex landscape safely.
For Individuals:
- Avoid Suspicious Links: Steer clear of dubious websites and never engage with unsolicited job offers, particularly those promoting “easy money” opportunities. Always verify job legitimacy through official channels.
- Communicate Concerns: If you are a teenager, report any suspicious job postings to a parent or authority figure. Remember, no paycheck is worth risking a criminal record.
For Organizations:
- Employee Training: Equip staff with the skills to recognize phishing attempts and dubious links.
- Dark Web Monitoring: Implement systems to monitor for employee credentials on dark web forums, as well as résumés belonging to former employees. HR should be trained to identify “shadow experience” on applicant histories.
- Continuous Monitoring: Regularly track dark web resources to stay updated on potential threats. Kaspersky’s Digital Footprint Intelligence service can facilitate this.
- Utilize Threat Intelligence: Leverage a diverse set of threat intelligence resources that cover surface, deep, and dark web platforms to stay informed of the tactics used by threat actors.
Through these practices, both individuals and organizations can enhance their understanding of this complicated environment and take proactive steps to protect themselves.
