Cybercrime-as-a-service (CCaaS) market is growing. Decentralization of data architecture is not occurring only at the organization level but is also being replicated in the cyber crimes eco system with hackers building hacking exploits to suit the needs of their customers. An on-demand access to off the shelf solutions helps attackers tailor and improve solutions on the go. They are now structured very similar to a traditional SaaS company targeting customers deliberately and identifying disgruntled employees. On one hand, this makes it harder to attribute the attack to the actual perpetrator since several users, especially Nation States, could be using the services of a CCaaS provider. On the other hand, pattern recognition and an occasional slip by the hackers can reveal the cash trail and hence help in attribution.