When kids can hack into boxes and steal sensitive data, I always wonder who the real criminals are.

Having done a few ransomware IR cases, the teenage affiliate thing stopped surprising me a while back. The ops that run as a service mean the person pulling the trigger often has no real skill, they just rent the panel and follow a how-to.