Rather than amateurs working out of their parents' basement, malware creators are often part of an underworld of criminal gang, or working directly for a foreign government or intelligence agency.