Understanding how bad actors recruit and develop employees to share information can allow security leaders to harden their organizations against the threat of social engineering.