“what benefit does a hacker derive from their activity?”
Send spam sites, adware, etc. to your wife’s friends.
I think it could be worse: many non-FB websites let you to log in to their sites using an FB account. So, the hacker can use an FB account to log in to those other sites. From there, who knows what further damage they can do.