Cybercrime Syndicates: How they operate

It may seem that cybercriminals mostly operate on an individual basis by fiddling behind a computer screen somewhere in a hidden dark basement.

The stereotype of the lone hacker toiling away in isolation is a persistent myth.

While undoubtedly some cybercriminals operate as lone wolfs, the reality is often far more complex. Many cyberthreats originate from highly organized groups, syndicates, or even nation-states.


Examples of these organized entities include:

  • Anonymous: A decentralized hacktivist collective known for its politically motivated cyberattacks.
  • Evil Corp: A sophisticated Russian cybercrime syndicate with a hierarchical structure and global reach.
  • PLA Unit 61398 A state-sponsored hacking group affiliated with the Chinese military.
  • RaidForums: A prominent online marketplace for stolen data and hacking tools.

These groups often possess substantial resources, cutting-edge technology, and a clear organizational structure.

Roles within such organizations can vary widely, including:

  1. Programmers: Develop malicious software and tools.
  2. Developers: Create infrastructure and platforms for cyberattacks. 
  3. Exploit Engineers: Identify and exploit vulnerabilities in software and systems.
  4. Operators: Execute attacks and manage botnets.
  5. Money Launderers: Facilitate the movement of illicit funds.
  6. Recr​uiters: Identify and bring in new members.​


» Blog: Who's Hacking You? A Guide to Cybercriminals

» Blog: Most common cyber threats


Cybercrime Syndicates: How they operate
Able bv, Ellen Le Beer August 8, 2024

Who's hacking you? A guide to cybercriminals