Cybercriminals Target SMBs with Increased Dark Web Activity

In the first four months of 2026, small and medium-sized businesses (SMBs) represented over 60% of dark web posts offering access to compromised corporate systems, according to Kaspersky. Specifically, small businesses accounted for 40% of these posts, while medium-sized businesses made up 20%. Initial access brokers are selling entry points into these networks, often providing details such as company location, industry, and revenue to entice buyers. The trend indicates that cybercriminals are increasingly viewing SMBs as attractive targets due to their lower cybersecurity defenses compared to larger corporations. Kaspersky emphasizes that all businesses, regardless of size, must enhance their cybersecurity measures and employee awareness. Recommendations include adopting scalable cybersecurity tools and considering managed security services for those lacking dedicated personnel. The findings suggest a growing risk of ransomware attacks and data theft targeting SMBs.

Key Points: • Over 60% of dark web access offers target small and medium-sized businesses. • Small businesses account for 40% of these listings, highlighting their vulnerability. • Kaspersky recommends enhanced cybersecurity measures for all business sizes.