Maybe I'm too naive, but I really don't get why people do this (the spamming, not the dissecting). Whoever did this could probably land a nicely paying programming job, no?
Is spamming that lucrative or what's going on?
Yes, it is. There's not that many programming jobs where you can easily make 500k+ a year.
For example, if you're phishing for credit cards with VBV info you might very well get $20 or more per card when selling in bulk (or twice that if you aren't). 10000 emails takes a couple of minutes to send and if you get a 1% success rate that's $2000