reply to KrK
Right - the money starts & ends mostly in N.America: the offshore component is the malware-for-hire layer. With good legislation users &/or regulatory (FTC) could go after the businesses that hire CWS.