If we are talking about malware and vulnerabilities, home users are a far bigger and easier target then corps.

Corporations have a custom firewall, proxy servers, VPN connections for all clients and double safeties for all important processes. While they are an interesting target for big organisations like terrorists and secret services, they have near to no value for the average Internet thiefe. Even if one could get in, there are no bank accounts lying around with money in them.

Home users have none of that, once you are on their PC you get everything. Sure their bank account will only net you a few thousand on average, but you get it easily.