Given how much is spent on ads, I’d say that an email is still worth more than that. So, what you get is spammers paying minuscole amount of money to skip the spam filter and killing the idea at the root.

Or they can simply steal these credentials from one of the millions of hacked sites and cause additional trouble to them.