A revolutionary concept in cybercrime is what I call “distributed cybercrime,” a business model in which cybercriminals attack many victims in the same campaign. The new business model of distributed cybercrime has made some attackers multi-millionaires in a short amount of time due to its many business benefits. The attack skill level is low compared to techniques such as spear-phishing – regular ol’ phishing is good enough for weak targets. Attacks require less effort as they target “low-hanging fruit” (i.e., individuals or organizations with sub-par security) Less effort and more profit means better ROI.”]
Source: https://www.cuinfosecurity.com/blogs/distributed-cybercrime-attack-world-p-2430