Criminals are adept at utilizing legal off-the-shelf products and services for criminal activities, while security companies often portray them falsely as hackers. Social engineering is key for most cyber crimes to be successful.