DDoS botnets are a lot easier than ransomware. They don't have to communicate with the user and don't need a credible threat. Many devices that simply don't hav

DDoS botnets are a lot easier than ransomware. They don't have to communicate with the user and don't need a credible threat. Many devices that simply don't have a realistic ransom threat are usable for those, and the same code can potentially be reused across completely different classes of devices as long as they run the same underlying OS. They also often don't cause problems for the user, so the user - and as a result, the vendor - doesn't have a strong incentive to avoid them.