What's challenging in eliminating cybercrimes is rather how to stop/arrest the actors. In the meantime we have a multi billion business, and growing, to defend against threat actors. Apparently topped up in research departments for dead end studies.
Knowing what is being sold in the black cyber market is frivolous. Full supply tracing or not, I don't see what value is provides.