Your typical criminal is usually trying to make money or carry out targeted vendettas, but terrorists and hostile countries with purely destructive intentions would be more willing to carry out such attacks, especially at the worst possible moment. The probability of it occurring in any given year is lower than a cryptomining or DDoS botnet, but the damage done could be astronomical.