However, the report only looks at the flow of money to cyber-criminal gang leaders, and many run affiliate operations – essentially renting out the tools needed to launch attacks to others – so it’s not known where the individual hackers who work for the big gangs are from.