If you look at the Symantec report:

"This particular variant charges $200. Over a period of approximately one month of activity, from September to early October, 68,000 unique infected IP addresses were identified connecting to the C&C server."

68,000 times $200 is not bad, and that was just one month, and one server.