Hmmm..
The blame "... lies with the botnet operators – and, perhaps more crucially, the dimwit IoT manufacturers who crank out criminally insecure hardware that can be compromised en masse. Particularly China-based XiongMai Technologies, which produces vulnerable software and hardware used in easily hijacked IP cameras, digital video recorders and network-attached video recorders. These crappy devices were at the core of today's attacks, according to Flashpoint.
Hrm.. Wonder if, by some slim chance, XMT might just be a lot more aware of the holes, and the botnets that find these holes, than they're letting on? Nah.. Couldn't be that a company deliberately makes their product crap/insecure for $profit_reason...