Cyber Threats Targeting Australia and New Zealand Fueled by Initial Access Sales, and Ransomware Campaigns

Cyble documents a critical rise in the commercialized initial-access marketplace across Australia and New Zealand in 2025, reporting 92 compromised-access listings concentrated on data-rich sectors (retail most impacted). The analysis identifies prolific sellers (cosmodrome, shopify), real-world incidents (Scattered Spider’s airline breach exposing ~6 million customer records; Stari4ok selling 250GB of retail data), and warns that decentralized access sales will sustain elevated cyber risk into 2026.