Telcos send routers with default passwords to their customers, who never change them, and once they're compromised, they automatically scan neighboring IP space for more vulnerable routers from the same ISP. Read the rest

http://feeds.boingboing.net/~r/boingboing/iBag/~3/-mBuI1vm4NM/self-sustaining-botnet-made-ou.html