The latest evolution of cyber weaponry is brought to you by the default passwords in Internet of Things (IoT) devices. That includes just about every conceivable modern electronic device—from home thermostats, lighting systems, refrigerators, cars, and water meters, to personal fitness devices, toasters, bicycle helmets, toys, and even shoes and clothing. In this report, we look at the growth of IoT devices as DDoS attack tools, who is on the hunt for these devices, how they’re using them, and which attack trends are emerging.