An affiliate program in cybersecurity is a system where cybercriminal organizations recruit external partners, known as affiliates, to deploy malicious software or conduct attacks using the group's tools or infrastructure. In return, affiliates receive a share of any profits, such as ransom payments. This business model allows criminal groups to expand their reach and increase attack frequency without directly carrying out every attack themselves, making cybercrime more scalable and harder to trace.