Q3 2024 Initial Access Broker Market Summary
After analysing the IAB ecosystem in the first and second quarters of 2024, CYJAX has continued tracking IAB listings. This whitepaper presents the statistics and trends from Q3 2024 observed on prominent Russian and English-language cybercriminal forums, offering insights into market changes and developments.
Trends in Initial Access Broker Listings in 2024
Throughout the first three quarters of 2024, the number of IAB listings has steadily declined, while the average price of these listings has risen. This trend has continued into Q3, though a full-year analysis after Q4 2024 may confirm these patterns more definitively.
High Broker Turnover with Consistent Actors
The IAB market shows a high turnover rate, with many brokers appearing briefly before disappearing. However, a few brokers, such as SGL and CatScientist, remain consistently active.
Geographic and Sectoral Targeting
Western countries continue to be heavily targeted, and sector-specific targeting appears largely opportunistic. Organisations across all industries and sizes, from companies with less than $5 million in revenue to multi-billion-dollar corporations, are being advertised, reinforcing the view that any organisation can be a target for monetary exploitation within the IAB market.
Preferred Access Types
VPN and RDP remain the most commonly sold access types, though listings for less common access types vary widely, as observed in previous quarters.