I mean, logically, the take home has to be pretty decent, but it's not approaching the take homes that drug cartel's tend to get, so they probably lose big big

I mean, logically, the take home has to be pretty decent, but it's not approaching the take homes that drug cartel's tend to get, so they probably lose big big chunks of profit to local corruption. Otherwise you'd see the same thing you see in central america - the immense profit potential slowly militarizes the entire industry and you've got private armies tooling about. From what we've seen out of Russia, the militarization of hacking hasn't yet evolved to private armies - so either it's all being controlled by an existing (maybe the government) or early emergent (maybe a shiny new oligarch) player or the profit margins just aren't enough to justify violence. As soon as you can make 200k by robbing a criminal you'll see it happen though.