From what I read this was an uncomplicated attack. These guys used insecure hosts with default passwords such as home routers with admin admin for user name and password. Many default passwords are easily found out by simply going to the manufacturers website. So if you don't want to inadvertently be a part of the botnet then change your default passwords on your device or password protect them.