The APWG's latest study has found that cybercriminals have been shifting their tactics markedly, by registering more and more domain names, rather using web servers and domains they have hacked into.