Hackers are increasingly using several forms of cybercrime-as-a-service to attack global organizations, Sophos reports.