{"id":45317,"date":"2022-02-16T16:44:56","date_gmt":"2022-02-16T16:44:56","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/33116\/How-The-Initial-Access-Broker-Market-Leads-To-Ransomware-Attacks.html"},"modified":"2022-02-16T16:44:56","modified_gmt":"2022-02-16T16:44:56","slug":"how-the-initial-access-broker-market-leads-to-ransomware-attacks","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/how-the-initial-access-broker-market-leads-to-ransomware-attacks\/","title":{"rendered":"How The Initial Access Broker Market Leads To Ransomware Attacks"},"content":{"rendered":"

To perform a ransomware attack successfully, cybercriminals must first obtain access to their victim’s PC or network. <\/p>\n

Gone are the days when ransomware was confined to malware that targeted individuals with fake threats from organizations like the FBI or IRS, demanding payment through a PC pop-up following encryption. <\/p>\n

Now, while individuals may still encounter ransomware — especially when antivirus programs are not in use — companies are the big game that criminals hunt.  <\/p>\n

Time is money in the corporate world, and ransomware has exploded in recent years to become an almost separate cybercriminal business of its own. As a result, ‘sub’ services have emerged that assist ransomware developers in the deployment of their illicit creations — ranging from language services to handle ransom payment negotiation to Initial Access Brokers (IABs) who offer the covert access to a network required in the first stage of a ransomware attack.  <\/p>\n

As noted in new research conducted by KELA<\/a>, the ransomware-as-a-service (RaaS) economy relies on IABs to reduce the need for extended reconnaissance or the time to find a method for entry.  <\/p>\n

On average, IABs sell initial access for $4600, and sales take between one and three days to finalize. In the cases identified by the cybersecurity firm, once access has been purchased, it takes up to a month for a ransomware attack to take place — and potentially for the victim to be subsequently named and shamed on a leak site.  <\/p>\n

\"screenshot-2022-02-14-at-10-52-00.png\"<\/span>