Threat Advisory: Hackers Are Selling Access to MSPs | Huntress

This report highlights the growing role of Initial Access Brokers (IABs) who sell unauthorized access to organizations—including Managed Service Providers (MSPs) with broad customer reach—using buyer-oriented metrics such as access level, geography, revenue, and ransomware insurance. It underscores the specialization of cybercriminal ecosystems separating initial access from ransomware deployment, reducing exposure to law enforcement, and elevating supply chain risk via MSPs. The piece references historical ransomware activity for context and concludes with practical MSP-focused mitigations like MFA, patching, least privilege, segmentation, monitoring, and verified offline backups.