Initial Access Brokers (IABs) Fuel US Dark Web Market Growth

The article outlines how the Dark Web operates as a structured marketplace that informs what threats US firms face, with SOCRadar’s US Threat Landscape Report 2026 – based on data from January 2025 to January 2026 – noting that 88.3% of posts referencing US targets focus on American organisations, while 11.7% involve cross-border campaigns.

It emphasises a high-exposure landscape driven by factors such as the average US breach cost of $10.22 million, 19% of breaches involving stolen credentials, and 67% of ransomware activity coming from smaller groups, all of which amplify the incentive for attackers. The piece highlights Initial Access Brokers as key enablers, whose listings for access to US networks have more than doubled since Q1 2023, with the US contributing about 24.7% of global listings.

It also describes what is being traded on the Dark Web—data or database leaks at 61.53%, direct access and credentials at 29.31%, and other categories making up the remainder—underscoring a shift toward monetising attack outcomes rather than tools.