Because the profits from serving the malware are concentrated while the harm is diffuse.