In this presentation we are going to look into alternative hypotheses where cyber-criminal gangs cooperate with nation-states to target victims in order to steal data of value for the nation-state sponsoring the operation, hiding the attribution and the espionage motive.