The Rise of Recruitment in the Dark Web: A Look at Emerging Trends
The Dark Web Job Market
The dark web is not just a haven for illicit activities; it’s also a bustling marketplace for recruiters looking to hire cybercriminals. A recent report from Reliaquest reveals a striking increase in recruitment and self-promotion posts on cybercriminal forums like “Exploit” and “RAMP.” In just the first half of 2025, these posts matched the total from the previous year, which was itself markedly higher than in 2023.
The efforts of these dark web recruiters mirror those of traditional job boards. They’re searching for specific skill sets that are crucial for the ongoing “business” of cybercrime. For instance, candidates with expertise in AI and English-speaking social engineering have become particularly desirable.
In-Demand Skills and Growing Demand
According to the Reliaquest Threat Research Team, English-speaking social engineering specialists saw job listings more than double between 2024 and 2025. An overwhelming 87% of posts on these forums are from recruiters, pointing to the high demand for skills that can initiate and execute successful cyber attacks. Groups like Scattered Spider have effectively leveraged these capabilities for their operations, indicating that the demand is likely driven by proven results.
Trey Ford, chief strategy and trust officer at Bugcrowd, emphasizes the organized nature of these campaigns, where adversaries collaborate with fewer barriers than traditional security teams face. This ecosystem enables cybercriminals to effectively share techniques and resources.
The Role of AI in Cybercrime
One of the most significant trends in this underground recruitment landscape is the integration of AI into cybercriminal operations. Dave Tyson from iCounter points out that although there was a decrease in recruitment for IoT hacking in 2024, interest has surged again. In fact, by the end of 2025, these roles are expected to exceed previous levels. AI experts are increasingly sought after for their ability to automate processes. This marks a shift from merely using AI for isolated tasks to embedding it within broader operational frameworks.
As an example, the recruitment of specialists in distributing malware through ClickFix resulted in a dramatic 200% increase in ClickFix activity within a short period. This illustrates the effectiveness of targeted recruitment in the dark web’s economy.
Predicting Future Cybercrime Trends
Monitoring the types of skills being sought after in the dark web can provide critical insights into the future of cybercrime. As the Reliaquest researchers highlight, much of this activity centers around cloud exploitation. Mentions of specific cloud platforms like Azure and Entra have reportedly quadrupled since 2023. This trend underscores the need for organizations to stay a step ahead.
Furthermore, the emergence of deepfake technology poses new threats. Experts warn that if adversaries can eliminate language barriers in real time, the potential for widespread attacks will grow exponentially. Current recruitment efforts already show a strong inclination towards those who can effectively use deepfake capabilities to enhance social engineering tactics.
The Implications for Cybersecurity
Cybersecurity professionals are now faced with the challenge of addressing an evolving threat landscape. With more sophisticated and deceptive tactics on the rise, organizations need to bolster their defenses. Lack of robust security measures could expose them to substantial risks from these advanced social engineering attacks.
Trey Ford advises that companies must be vigilant in monitoring their hiring processes. This includes scrutinizing new accounts and ensuring that identity verification and usage patterns are carefully monitored during onboarding. In today’s digital world, understanding the dynamics of the dark web job market could serve as a compass for organizations aiming to anticipate and counter future cyber threats.
The Growing Dark Economy
Experts project a thriving dark economy in the coming years, fueled by successful cyberattacks and the increasing need for skilled personnel in the realm of illicit online activities. As cybercriminals continue to achieve success, the demand for talent in this dark ecosystem will likely drive both recruitment efforts and compensation levels higher.
The interplay between cybersecurity defenses and the dark web job market illustrates a relentless game of cat and mouse. As firms strengthen their strategies, cybercriminals will equally adapt and evolve, ensuring that monitoring and preparation remain paramount for any organization concerned about safeguarding its digital assets.
