Initial Access Brokers in Q3 2021

This Q3 2021 intelligence brief analyzes Initial Access Broker (IAB) activity, noting RDP and VPN accesses as the most commonly sold entry points, observed price trends, most-targeted sectors (retail, technology, industrial goods & services), and geographic focus (primarily US victims). It discusses the operational impact of high-profile incidents such as the REvil supply-chain attack on Kaseya, the emergence of the RAMP forum as a marketplace for RaaS affiliates and IABs, and potential effects of US sanctions on cryptocurrency accounts used in ransomware payments.