A initial access broker (IAB) is still running rampant despite being tracked for seven years by researchers, and despite striking up a predictable tune when it comes to the tools and tactics used to compromise organizations (and pave the way for follow-on ransomware attacks). Between July 2020 and July 2022, Secureworks identified five separate intrusions by the group it tracks as “Gold Melody”
Source: Dark Reading: Cloud