How APIs can help hackers launch cybercrime campaigns