I'm new here so bear with me any rookie mistake I will make by making up a few assumptions I've got so far (I'm also no programmer).

How can botnets be not worth it for someone who can do it when it comes to mining btcs? It's an investment. Sure, it's more stable money running a spam or DDoS service it seems but what about the rise in BTC's worth?