Dark Web sees rise in postings selling access to corporate networks
The Dark Web is an underground marketplace where criminals trade in all sorts of illegal or malicious items. One valuable product up for sale consists of information that can help hackers break into corporate networks. Comprised of malware and services, this type of information has seen an increase in Dark Web postings over the past couple of years. A report published Wednesday by enterprise security provider Positive Technologies illustrates the rise of "access for sale" exploits.
"Access for sale" on the Dark Web is a generic term that refers to software, exploits, credentials, or anything else that allows hackers to illicitly control one or more remote computers. Under this approach, criminals sell access to the networks of industrial companies, professional services companies, financial firms, scientific organizations, schools, and IT organizations. Such access allows attackers to directly target business networks or hire skilled "professionals" to hack into networks to infect machines with malware.
For the fourth quarter of 2019, Positive Technologies found that 50 access points to networks of major companies around the world were publicly up for sale on the Dark Web. That was the same number for all of 2018. For just the first quarter of 2020, that number shot up to 80, revealing a major increase over the past two years.