Malicious insider

In internal penetration testing, the tester has knowledge of the target system and possibly basic credentials, such as an ordinary user account. This simulates a malicious insider: someone who already has some access but tries to misuse it.