Cyber spies targeting foreign-based crooks