Broke cyber pros flock to cybercrime side hustles

Cybersecurity professionals are finding it more attractive to take their talents to the Dark Web and earn money working on the offensive side of cybercrime. This puts enterprises in a tough spot: cut into profit growth to keep cybersecurity skills from flowing to the highest bidder, or figure out how to defend their networks against those who know their weaknesses most intimately.

Layoffs and consolidation across the cyber sector is ratcheting up the pressure on the remaining workers, while at the same time salary growth is stalling — making a cybercrime side hustle an increasingly attractive way for cyber pros to make ends meet, according to a new study out of the Chartered Institute of Information Security (CIISec), which analyzed Dark Web advertisements for cybercriminal services provided by professionals with cybersecurity day jobs.

The CIISec report found a raft of offers on Dark Web sites, including a pro Python developer who would make chatbots for $30 an hour to earn extra Christmas present money for their kids. Another seasoned developer will make phishing pages, crypto drainers, and more, while yet another will use AI to help with coding, starting at $300 per hour, CIISec reported.

Cyber Pros Turning to Cybercrime: An Alarming New Trend

This alarming trend marks an entirely new era in cybersecurity, according to Devin Ertel, CISO at Menlo Security.

“I’m shocked and troubled to witness skilled professionals turning to cybercrime amidst mass layoffs,” Ertel says. “This marks a significant shift, reflecting the urgent need for both employment and ongoing training within the field.”

Ertel points to a surplus of cyber talent and economic uncertainty as potential drivers of the “unfortunate trend.”

Gartner predicts that by 2025, 25% of cybersecurity leaders will leave their roles due to stress. And despite layoffs in the cybersecurity sector, which have largely focused on non-technical roles in marketing, sales, and administration, there are still hundreds of thousands of open jobs in the US cybersecurity sector alone.

To read the complete article, visit Dark Reading.