It is well known that criminals, who operate outside the law and the protection of the state, face difficulties in cooperating due both to the requirement of secrecy and a deficit of trust. For cybercriminals the anonymity of the Internet creates further challenges, making it even more difficult to assess trustworthiness and enforce agreements. Yet, contrary to expectations, collaboration among cybercriminals is prevalent, and a sophisticated industry has emerged. The purpose of this paper is to address this puzzle in relation to profit-driven cybercrime. It draws on a collection of interviews with former cybercriminals that provide a valuable form of data on micro-level and often secretive interactions. It examines four key mechanisms that lead to improved cooperation: reputation, appearance, performance and enforcement. It also addresses the rarely discussed, and somewhat counterintuitive, role that offline interactions may play in enhancing collective action among cybercriminals.

The terrorist attack in Norway on 22 July 2011, carried out by a right-wing extremist, was a shocking event, leaving 77 dead and dozens seriously wounded. It soon gave rise to a range of interpretations and explanations as to the causes and implications of the attack. Engaging with classical anthropological and more recent sociological literature on trust and blame, the article shows that there was no hegemonic narrative or explanation of the attack, and similarly no broad agreement over the steps to be taken in order to reduce the chances of future attacks. Six different attempts to account for the terrorist attack are described, but only two correctly identify demographic change, migration and the rise of xenophobic politics as the underlying causes of the terrorist attack. This suggests that the high level of trust characteristic of Norwegian society is likely to be reduced as a result of accelerating change and accompanying social fragmentation.