Comment by GaryNumanVevo

Most of the compromised devices are routers or IoT devices, functionally no compute power to do anything interesting except spam IPs with requests.