I'm a little sceptical of info sec articles that claim enormous power for "cyber" criminals. We've been hearing this sort of thing since the mid 1990s, and it never totally materializes.