How do crooks obtain no day malware?

There are a couple of ways that bad guys can obtain zero-day malware:

1. They can purchase it on the black market.

2. They can produce it themselves.

3. They can steal it from a legitimate company or person.

4. They can discover it in the wild.

The most common method that bad guys get zero-day malware is by purchasing it on the black market. There are a number of black markets that offer zero-day malware, and the rates can vary depending on the demand and the sophistication of the malware.

https://nafn.org.uk/?p=140 Lawbreakers can likewise create zero-day malware themselves, although this is less common. In order to do this, they would require to have a mutual understanding of computer system security and exploits.

Another method that wrongdoers can get zero-day malware is by taking it from a genuine company or individual. This can be done by hacking into a business's network and taking the malware, or by social engineering a business or individual into offering them the malware.

Bad guys can discover zero-day malware in the wild. This usually takes place when a security scientist finds a new vulnerability and composes an exploit for it. The scientist may then sell the exploit to a criminal group, or the exploit might be leaked online.