12 Years Later: Common Configuration Flaw + Internet of Things = Massive Attacks

Akamai researchers discovered SSHowDowN, a large-scale campaign abusing enabled SSH TCP port forwarding and default credentials on millions of IoT devices (cameras, NVRs, NAS, routers, etc.) to proxy credential-stuffing attacks against many websites; the campaign uses single-use devices and careful round-robin load balancing rather than traditional persistent bot binaries.