Initial Access Brokers (IABs) are actors in the cybercrime ecosystem that specialize in gaining initial access to computer systems and then selling this access to other malicious actors, such as ransomware groups, cyber spies or data thieves. The operations of IABs are diverse and sophisticated, and involve various methods of compromising systems and ensuring that their access has value on the black market.