These are the Company Assets Most Wanted by Global Cybercriminals in 2024

Technology & Telecommunications

Premium

Akbar Ridwan 16/06/2025 19:40 WIB

URL has been copied

Memuat...

According to Fortinet's observations, credentials are not the only valuable commodity stolen and sold by cybercriminals on the dark web in 2024.

Global Cybercriminals' Most Targeted Company Assets (2024)

A Small Font
A Medium Font
A Bigger Font

You are accessing content Single Data Premium.
To continue, please subscribe or buy individually.

Professional

Enjoy premium access with a more affordable price.

Start from

~~Rp300.000~~ 150.000/month

Access more premium content and exclusive features for customers.

Start from

50.000/month

Hanya Rp833 per artikel

More details »

Buy Retail

Read the article immediately “These are the Company Assets Most Wanted by Global Cybercriminals in 2024”.

Rp10.000

We accept the following payments:

Some payment methods are still in the process of being activated.

Global Cybercriminals' Most Targeted Company Assets (2024)

Download

Source

A Small Font
A Medium Font
A Bigger Font

Based on observations by Fortinet, a US cybersecurity company, credentials are not the only valuable commodity stolen and sold on the dark web or darknet.

In 2024 Fortinet found there was a significant increase in darknet activity related to initial access brokers (IABs), who sell direct access to corporate infrastructure.

"This service allows adversaries to infiltrate networks without searching for and exploiting vulnerabilities," Fortinet stated in its 2025 Global Threat Landscape Report, in the section on The Business of Corporate Infiltration.

Based on Fortinet's monitoring, IABs offer more than just individual credentials. This is because some of their most sought-after corporate-related assets by cybercriminals include:

Corporate Virtual Private Network (VPN) credentials: 20%
Remote Desktop Protocol (RDP) access: 19%
Admin panels: 13%
Webshells: 12%

RDP is a system that allows users to access and control computers remotely. Webshells are malicious scripts used to provide remote access and control to web servers.

"IAB groups such as sandocan (26%), F13 (16%), and JefryG (12%) lead this economy, offering pre-compromised internal network access to current and aspiring cybercriminals," said Fortinet.

The 2025 Global Threat Landscape Report generally reveals that cybercriminals are moving faster than ever before, automating reconnaissance, shortening the time between vulnerability disclosure and exploitation, and enhancing their operations through the industrialization of cybercrime.

In all phases of attacks, FortiGuard Labs—part of Fortinet—observed that threat actors utilize automation, commodity tools, and artificial intelligence (AI) in their actions.

Editor : Erlina Fury Santika

"Disclosure: This is an AI-generated translation of the original article. We strive for accuracy, but please note that automated translations may contain errors or slight inconsistencies."