The short answer is, malware authors will pay you to distribute their malware.
If you phish someone and gain access to something, you can sell that access to someone else.
The "end" of the chain is things like ransomware, identity theft, cc fraud, etc.