Cybercrime groups already leverage social engineering tactics to target insiders, gathering information via social media, who enable access unknowingly. This next step, inviting employees to be in on the attack, would seek out more desperate individuals or those with an axe to grind.