Overview of the Initial Access Broker Market Q2
Initial Access Brokers (IABs) are a key part of the cybercriminal ecosystem, providing access for ransomware groups, data leakers, and APTs. CYJAX’s Q2 2024 analysis tracks changes in IAB listings across Russian and English-language forums, comparing trends from Q1 and confirming hypotheses on market shifts.
Key Takeaways
- Top Targeted Countries: The United States leads (29.4%), followed by Spain (4.4%), Brazil (4.2%), France (4.2%), and others.
- Most Targeted Sectors: Professional services (11.9%) and manufacturing (9.1%) remain top, with financial, IT, retail, and education sectors also significant.
- Access Types: VPNs (30.4%) and RDP (19.7%) are the most targeted, with new Bot access emerging this quarter.
- Antivirus Solutions: Windows Defender remains the most targeted (13.4%), followed by Sentinel, ESET, and others.
- Top IABs: Кот Учёный (8.4%), SGL (8.1%), and rcode (5.4%) are the most prolific IABs.