Australia & NZ Initial Access Threat Landscape 2025

The Cyble Threat Landscape Report for Australia and New Zealand (Jan–Nov 2025) describes a marked escalation in cybercrime driven by a commercialized initial-access market: 92 compromised-access listings were observed, with retail, BFSI and professional services most targeted. The ecosystem is fragmented and scalable, with prolific sellers (e.g., cosmodrome, shopify) alongside one-off actors; notable incidents include a suspected Scattered Spider breach of an Australian airline exposing nearly six million customer records, multiple forum listings selling access to large retailers and telco admin portals, and hacktivist activity targeting network equipment.