Understanding the Big Business of Cybercrime

**Executive summary:** This briefing describes the scale and commercial nature of modern cybercrime, emphasizing four major trends—Ransomware-as-a-Service (RaaS), Business Email Compromise (BEC), the commercial zero-day market, and targeting of healthcare—alongside a taxonomy of threat actor types and pragmatic defenses such as threat intelligence, patching, detection/response, and security awareness training.