Not particularly security savvy, but :

The infected devices then attempt to crack the telnet password by guessing default and commonly used credential pairs.

My understanding is that the worm is targetting connected devices with supidly simple credentials, which is why “Internet-of-Things” is mentioned?