Sometimes it's a paid botnet.