You don't need access to persistent storage, especially with multi-entry executables like busybox, which are often similar to built in rootkits today. I actual

You don't need access to persistent storage, especially with multi-entry executables like busybox, which are often similar to built in rootkits today. I actually just spent time last week getting rid of tftpd, telnetd, netcat etc... on some IP cameras last week. You only need a few k of ram to have a bot, especially with how it is almost the rule that embedded system run everything as root. If you have the ability to do firmware extraction, look at just how bad the industry is now.