Overview of the Initial Access Broker Market Q2

Initial Access Brokers (IABs) are a key part of the cybercriminal ecosystem, providing access for ransomware groups, data leakers, and APTs. CYJAX's Q2 2024 analysis tracks changes in IAB listings across Russian and English-language forums, comparing trends from Q1 and confirming hypotheses on market shifts.

Key Takeaways

  • Top Targeted Countries: The United States leads (29.4%), followed by Spain (4.4%), Brazil (4.2%), France (4.2%), and others.
  • Most Targeted Sectors: Professional services (11.9%) and manufacturing (9.1%) remain top, with financial, IT, retail, and education sectors also significant.
  • Access Types: VPNs (30.4%) and RDP (19.7%) are the most targeted, with new Bot access emerging this quarter.
  • Antivirus Solutions: Windows Defender remains the most targeted (13.4%), followed by Sentinel, ESET, and others.
  • Top IABs: Кот Учёный (8.4%), SGL (8.1%), and rcode (5.4%) are the most prolific IABs.

Fill in our form to get your copy

Get your copy
Receive our latest cyber intelligence insights delivered directly to your inbox
Get started

Get Started with CYJAX CTI

Empower Your Team. Strengthen Your Defences.CYJAX gives you the intelligence advantage: clear, validated insights that let your team act fast without being buried in noise.