Poker sites were the first victims of criminal extortion. If they did not pay up 30 grand or so, the bots would shut down the sites. Then bigger prey like banks were attacked. It can be almost any big firm that can pay who will be attacked today.
It can e the DOD, Treasury, infrastructure.
We have a 23 old kid working to defeat bot attacks in America but finding the criminals is still a very difficult task.
Usually they are Russsian or ex Soviet block. China has state sponsored hackers like army geek troops.