Rising foreign interference exploits insider threats, says DTEX report

Insider threats are increasingly being exploited by foreign nation state actors, leaving mission-critical entities exposed to higher risks of interference, according to a 2024 report by DTEX Systems, a global expert in insider risk management.

The company's i3 Insider Risk Investigations Report - Foreign Interference: Special Edition - illuminates the escalating issue of foreign interference and intellectual property (IP) theft, advocating for stronger collaboration and information-sharing to bolster the defensive resilience of key agencies and bodies.

"Ongoing geopolitical tension against a backdrop of technological disruption has changed the security landscape as we know it, blurring the lines between cyber, physical, and psychological threats," the report states, indicating that safeguarding trusted insiders against foreign influence is a pressing issue that needs urgent attention. DTEX states that it has seen a 70% hike since 2022 in the number of clients requesting help in shielding their organizations from foreign meddling, with a large quantity of these pleas originating from crucial infrastructure and public sector bodies.

Data from more than 1,300 inquiries across DTEX's worldwide customer base revealed that 42% of all cases involved theft of IP or other non-proprietary data. The tech domain, encompassing semiconductor and artificial intelligence companies, was the most severely affected, making up 41% of all IP theft cases.

This was trailed by the pharmaceutical industry (20%) and vital infrastructure sectors including energy and telecommunications (14%). In addition, the report discloses that 92% of businesses view the internal use of artificial intelligence tools as a significant security concern.

It's particularly noteworthy that the report offers particular insights into the activities of "super malicious insiders" based on the Insider Threat Kill Chain, which depicts the key stages leading to data exfiltration. "One of the most interesting and unexpected findings from our investigations was that only 12% of super malicious insiders, such as those colluding with nation states, are actively bypassing security controls. This underscores the reality of super malicious insiders flexing their tech know-how to avoid getting caught in what is fast becoming a psychological arms race," says Rajan Koo, CTO and Head of i3 Investigations and Engineering at DTEX Systems.

The report further warns about the rise of the 'socially engineered insider', as foreign state actors increasingly use their influence and stealth to target and exploit insiders. It highlights the mounting threat of espionage through legitimised channels, noting China's Thousand Talents Program as an example.

Koo stated, "Foreign interference and IP theft have reached all-time highs… now more than ever, the public and private sectors must band together to accelerate knowledge transfer and skills development. It is our mission to enable and accelerate best-practice information sharing among trusted allies in the spirit of uplifting insider risk management and, in turn, national security."