I bet anything China, Russia, and Iran are those so-called cybercrime groups. Check this BlackHat talk about catching the (at the time) biggest ever card fraud guy. Russian oligarch son. Guess what, he was one of those returned to Russia in an exchange with the Trump admin as part of "peace negotiations".
Cyberattacks are part of the low level war they are also waging via dragging anchors to cut Internet cables, throwing drones and jets into NATO airspace, and ofc disinformation campaigns.
So yeah they are leveraging the cybercrime aspect to further weaken USA / NATO / The West / Tolerant Inclusive Democracy.
IBM Advanced Systems Group -- a bunch of mindless jerks, who'll be first against the wall when the revolution comes... -- with regrets to D. Adams