They could find legitimate work, yes, but you're forgetting that they do it for the thrill. Just like people can be passionated for their careers, so can a black hat hacker or a scammer also find pleasure in his craft. Not saying it's the right thing, but I understand the appeal.