Profit split
Are the profits split equally in these groups, or do the top organisers get most of the cash, like most non-criminal organisations?
Kaspersky investigation unit boss Ruslan Stoyanov says a Russian cyber scum group of just 20 professional hackers has made a tidy $790 million in three years by emptying the world's bank accounts. Stoyanov says some $509 million is thought to have been ripped from the wallets of individuals and businesses from the US, and …
do the top organisers get most of the cash, like most non-criminal organisations
No, that would be criminal. Oh, wait ..
BTW: I am not sure the organisations you describe as non-criminal actually are (and not just banks :) ). From where I sit quite a few are only non-criminal because they either haven't been caught yet or have paid off the policing agency. Which, by a remarkable coincidence, is again also a feature of some criminal setups..
They are versed in it for other reasons (or actually the same) - their version is a money laundry system. Stolen money goes in, after a few transfers its traces are lost and clean money goes out. The countries participating and the money end-destination is pretty much the same as in tax evasion.
I did not see any references in this article, but the following sites provide additional information.
http://www.kaspersky.com/about/news/virus/2015/Russian-language-cybercrime-95-of-incidents-are-about-stealing-money
https://securelist.com/analysis/publications/72782/russian-financial-cybercrime-how-it-works/