A new threat intelligence report from the Abstract’s Threat Research Organization (ASTRO) will reveal that the cybercrime economy has industrialized network breaches with specialized criminals now selling pre-compromised access to corporate networks for as little as $500.
Abstract’s report, “Priced to Move: The Underground Markets of Modern Cyberattacks,” examines the rapidly growing ecosystem of Initial Access Brokers (IABs): attackers who break into organizations and then sell that access to ransomware gangs and other threat actors.
Key findings from the research include:
- Credential abuse is now the dominant entry point. 56% of incidents involved valid accounts without MFA.
- Ransomware attacks surged 47% year over year, fueled by the growth of this underground access market.
- Network access often sells for $500–$1,000, allowing attackers to target dozens of organizations simultaneously.
- Median time from initial compromise to ransomware deployment has dropped to just five days.
- Healthcare, government, and education are among the sectors seeing the fastest growth in IAB-driven attacks.
The economics are striking. The report details a healthcare breach where $2,200 worth of purchased access ultimately resulted in nearly $4 million in damage, a roughly 1,700x return on investment for attackers.
ASTRO says the rise of access brokers has fundamentally changed how cybercrime operates…turning network intrusions into a specialized supply chain where one group gains access, another sells it, and ransomware gangs monetize it.
You can read the research here:https://abstract.security/reports/priced-to-move
Like this:
Like Loading...
Related
This entry was posted on March 12, 2026 at 9:01 am and is filed under Commentary with tags Abstract Security. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Cybercriminals now sell corporate network access for as little as $500
A new threat intelligence report from the Abstract’s Threat Research Organization (ASTRO) will reveal that the cybercrime economy has industrialized network breaches with specialized criminals now selling pre-compromised access to corporate networks for as little as $500.
Abstract’s report, “Priced to Move: The Underground Markets of Modern Cyberattacks,” examines the rapidly growing ecosystem of Initial Access Brokers (IABs): attackers who break into organizations and then sell that access to ransomware gangs and other threat actors.
Key findings from the research include:
The economics are striking. The report details a healthcare breach where $2,200 worth of purchased access ultimately resulted in nearly $4 million in damage, a roughly 1,700x return on investment for attackers.
ASTRO says the rise of access brokers has fundamentally changed how cybercrime operates…turning network intrusions into a specialized supply chain where one group gains access, another sells it, and ransomware gangs monetize it.
You can read the research here:https://abstract.security/reports/priced-to-move
Share this:
Like this:
Related
This entry was posted on March 12, 2026 at 9:01 am and is filed under Commentary with tags Abstract Security. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.