Ransomware gangs are increasingly tapping initial access brokers, who sell ready access to high-value networks. On average, such access is sold for $1,500 to $2,000, an Israeli cyberthreat intelligence monitoring firm Kela reports. The most common types of access being sold are credentials for remote desktop protocol or VPNs; details of a vulnerability in the victim’s system that facilitates remote code execution; and access to Citrix products. Using these brokers can help gangs more quickly take down larger targets via what’s known as big game hunting.”]
Source: https://www.cuinfosecurity.com/blogs/ransomwares-helper-initial-access-brokers-flourish-p-2987