> This was almost 20 years ago. I'd love to find out how small network attackers try to "monetize" their victims today

Crypto mining, installing software to sell access to the host as a “residential proxy”, good ole theft of data, using the host for DDoS, click fraud, etc