"I sure don't see what anyone gets out hacking a site like this................"
I can think of a couple reasons, and I'm sure there are others.
Some people, unwisely, use the same password on multiple sites, including their sensitive sites. Hack BFT and find someone's username (often their email address) and their password. Hack into a bank's Online site and try the user's email address and password (that they hacked off of BFT). If it works, and there aren't any other protections in place, they are in.
Perhaps, they can plant a bot, a virus, or similar that will infect those who use this site and then that bot, virus or similar can do all sorts of dirty deeds, for them, on a multitude of computers.
I can think of a couple reasons, and I'm sure there are others.
Some people, unwisely, use the same password on multiple sites, including their sensitive sites. Hack BFT and find someone's username (often their email address) and their password. Hack into a bank's Online site and try the user's email address and password (that they hacked off of BFT). If it works, and there aren't any other protections in place, they are in.
Perhaps, they can plant a bot, a virus, or similar that will infect those who use this site and then that bot, virus or similar can do all sorts of dirty deeds, for them, on a multitude of computers.