there's a whole underground economy. I recall hearing a story of how one guy was busted who used to build an exploit kit and sell it to people for a cut of their earnings.
And then there's crazier shit like https://krebsonsecurity.com/2024/03/blackcat-ransomware-grou...