When it comes to cybercriminal infrastructure, the dark web gets the glory with its secret criminal marketplaces, illegal money laundering services and botnets as a service. Criminals also get a lot of what they need from legitimate commercial infrastructure providers.
It’s not just because mainstream vendors are more reliable than people who break the law for a living. Using commercial infrastructure is also a way for cyber attackers to avoid detection and seem legit while they go about their criminal business. Here are some of the ways that criminals are using — and abusing — law-abiding technology infrastructure companies and service providers.
