There are chains which end in espionage, but the volume pales compared to ransomware, identity theft, and carding. Too much money to be made.