Malware distribution system in which attackers get paid by the customer per payload installed. The number of hack attempts, spam messages delivered or visitors attracted to the criminal resource is irrelevant. Thus, no payment is due if user follows a download link but fails to actually download malware.