There is little revenue from hacking small sites, but popular ones, the other aspect is people go there seeking help remove malware and this would likely circumvent this. Not to mention the kudos they would be touting having hacked a security site.
Clearly crime does pay or no one would be doing it. If they are caught, very few are unfortunately; doomed, not a chance punishment really is pathetic in most cases, so no real deterrence.
I am sorry for that, actually i feel sad too but sometimes this could happened because people feel they are very strong already because they are a big player in security world.
So these news become our warned, if sometimes we become big player don’t be arrogant.
Like chinesse philosophy said : There is a more biggest mountain, than another big mountains.