Bad actor obtained passwords for servers, home routers, and smart devices by scanning internet for devices open to the Telnet port.
Source: Threadpost