The enduring cultural image of the cybercriminal is an unexpectedly persistent myth. For a long time now, pop culture has depicted the threat adversary as a lone, anti-social hacker operating from a dark bedroom, driven by mischief or vague ideological grievances.
That archetype is very much removed from reality. Today, when an organisation falls victim to a cyberattack, it is not battling an individual – it is defending itself against a highly structured, multinational corporation.
Modern cybercrime syndicates aren’t chaotic networks of amateurs. They have matured into sophisticated enterprises led by individuals with genuine corporate experience. These leaders apply standard business management principles, operational hierarchies, and advanced technologies (and even offer paid leave to new recruits) to maximise their return on investment. If your security team is still defending against the hacker of the 1990s, they are woefully underestimating the adversary.
The corporate structure of a cyber cartel
To understand the scale of this challenge, one must look at how these criminal groups are structured. They do not operate in silos; they mirror the exact department blocks of the organisations they target. Synergy is effective in business, whether legitimate or illicit. These cartels are governed by executive boards – sometimes referred to in intelligence circles as the Council of Elders or the Council of Professors. Beneath this C-suite sits a highly specialised division of labour:
