“Their business looks a lot like ours. Cyber criminals look to maximise their profits and minimise risk,” HPE argues.
The businesses are very different. Cyber criminals don't sack all their best people.
[ I was going to do the "well they would, wouldn't they?" joke, but someone else did something rather similar above...]