The State of CYBERCRIME Threat Intelligence 2022

Threats from the cybercrime underground emerge every day, yet many organizations still do not treat cybercrime threat intelligence as applicable to them. To understand how security teams approach it, KELA surveyed more than 400 US security professionals directly responsible for gathering cyber threat intelligence.

The findings show organizations are less prepared than they would like to be: 69% are concerned their data will be sold on cybercrime forums, only 38% say they are very likely to detect it, and nearly half have no documented cybercrime threat intelligence policy.

Key findings:

• 69% of respondents are concerned about threats from the dark web, and over half would not be surprised to find their data there
• Only 38% say they are very likely to detect their own data being released or sold on cybercrime forums
• 48% have no documented cybercrime threat intelligence policy in place
• The biggest challenges: no system or browser isolation, lack of investigation training, and no visibility into private forums and messaging groups
• Half of respondents are not satisfied with their visibility into the cybercrime underground