A Novel Concept

A while back, I read an article about some hackers that had been busted.  Apparently, they had created a website that when visited would install some malicious software on the person's computer.  Not only would this malicious software capture the username and password to that person's online bank account, it would send it to a server in Russia.  This server in Russia would then compute how much money would be safe to remove from the account without causing too many red flags, and withdraw that amount.

But that's not all.  Then, every time that person thought they were going to their online bank account, the malicious software hidden on their PC would redirect them through the Russian server.  The Russian server would then, on the fly, change the way the bank website displayed on the person's computer, so that the illegal transactions did not show up.

To the person with the infected computer, it appeared as if everything was fine.  The way that it was discovered is that someone actually brought up their bank's website on two computers at their house:  one infected with the malicious software, and one that wasn't, and could see the two different bank balances side-by-side.

Wow! Trojans...keystroke loggers...server redirects...rewriting HTML on the fly...these guys were geniuses.

My only question?

...

If they're this smart, why didn't they figure out a way to make money legally?