could just as well have been targeting his bank account It could have but only in a narrow technical sense. They didn't and don't because those types of direct

could just as well have been targeting his bank account It could have but only in a narrow technical sense. They didn't and don't because those types of direct abuses of the consumer-facing financial system are pursued with great vigor and perpetrators punished severely. It's the same reason it made sense to deploy 0 day exploits to thieve WoW gold but not actual money.