sponsored fraud and/or simply allowing their citizens to attack as long as it isn’t domestic (Russia has been notorious for this for a while). I think better coordination because they aren’t as underground as they used to be has allowed proliferation of better tools and so many more fraudsters are using high quality, modern fraud tools.