Access to 576 corporate networks around the world has been sold by initial access brokers during the third quarter, which was similar to the first two quarters of 2022, but total cumulative sales price reached $4 million, compared with only $660,000 during the second quarter, reports BleepingComputer.
Forty to 100 accesses have been sold by the three most prolific IABs during the third quarter, with the listings having an average selling price of $2,800, and a median selling price of $1,350, according to a report from Israeli cyber-intelligence company KELA.
The U.S. was the most targeted country of IABs during the third quarter, accounting for nearly a third of all IAB offerings, similar to the rate of ransomware attacks targeted at U.S.-based firms.
The report also showed that IABs mostly set their sights on the professional services, manufacturing, and technology sectors, which was also similar to the industries most targeted by ransomware attacks.
Novel Go-based information stealer Aurora has been increasingly added by threat actors in their arsenal, with at least seven active cybercrime groups either leveraging the malware exclusively or alongside other info-stealers Raccoon and Redline, BleepingComputer reports.