More common than you think, a lot of RAT malware uses an online panel too. Often self-hosted but I've seen a few solutions that host it for you.

I remember some sellers were offering turnkey modified ZeuS back in the day.