Cybercrime markets see surge in corporate access prices

The underground cybercrime economy is undergoing a significant shift as the value of stolen corporate access surges. While the abundance of stolen credentials has driven the price of basic login data down, verified entry into large enterprises is commanding premium prices.

Reports indicate that initial-access-broker (IAB) listings rose from an average of $2,726 in 2024 to $113,275 in the second half of 2025, representing a 4,055% increase. This spike is driven by brokers offering access to high-revenue organizations, with average claimed revenues for targeted entities rising to $3.242 billion.

In contrast, the commodity market for identity data remains inexpensive due to massive supply. KELA identified 2.86 billion compromised credentials in 2025, with business cloud and authentication services making up over 30% of the exposed data. Infostealer malware plays a central role in this ecosystem, harvesting browser passwords, cookies, and authentication data through phishing and malicious downloads to facilitate account takeovers and lateral movement within corporate networks.