A threat actor tracked as Water Barghest has compromised over 20,000 IoT devices and monetizes them as residential proxies.