Thousands of gadgets are still infected with code that is likely from the original versions of the original Mirai malware program. Many of them account for new malware families or newer versions of Mirai controlled by different groups in the distributed denial-of-service business. The SANS Technology Institute dean of research says that current telemetry on telnet scanning shows at least 100,000 sources daily. The malware code has too little impact on the network to create the pressure of patching. In many cases, there is no patch for affected device or the user cannot change the default password.”]
Source: https://www.bitdefender.com/blog/hotforsecurity/mirai-code-still-runs-many-iot-devices/