IAB

An Initial Access Broker is a criminal who breaks into organizations and then sells that access to other threat actors, most often ransomware groups. This specialization lets ransomware crews skip the hard work of intrusion and scale their operations. The IAB market is a key part of the cybercrime economy, and monitoring for its telltale early-stage activity helps defenders intervene before ransomware deploys.