This study investigates how cybercriminals meet, form networks, and develop criminal capabilities, focusing on the role of online forums. Analyzing 18 criminal investigations into phishing and malware networks, the research identifies four models of network growth. While social ties are crucial for most networks, forums also play a significant role by helping criminals find co-offenders and enablers. Access to forums can rapidly enhance the criminal capabilities of these networks.