Incapsula considers this attack to be “run of the mill”, and that all of the CCTVs were exploited due to the fact that their login credentials were left default. Humorously, the firm was able to access some of these guilty cameras, and happened to find that some were close to its offices.
Read more at http://hothardware.com/news/vicious-malware-enlists-linux-based-security-cameras-for-ddos-botnet