I think it's a worthwhile concept
I don't have the technical saavy that many of our contributors have, but I don't think all hackers are necessarily rational. I don't think ROI is an absolute necessity, or even the amount of work that it would take to accomplish such a mission as being an absolute factor. Some people just like a sense of achievement due to a malicious nature. One motive could be creating a cottage industry providing an anti-virus product or warranty coverage should the nature of the attack be severe enough.