In addition to the other commenters, here's an excellent defcon talk on what these some groups do:

Nina Kollars - Confessions of an Nespresso Money Mule - DEF CON 27 Conference

https://www.youtube.com/watch?v=2IT2oAzTcvU

Essentially, they wait for a buyer of a product to come along to a listing and order it - they'll then buy it using stolen credentials, have it drop-shipped or reshipped to the end user.

Everyone but the person with the original card comes out ahead, which is then pushed to all of us via higher fees if they notice and report the fraud.