More and more botnets are being sold as a service. By that, I mean things like DDoS as a Service. So it's not quite correct to say there's no cost to the hacker.