Initial Access Brokers are deliberately selling stolen SME access credentials on the darknet because these companies are often inadequately protected despite generating substantial revenues.