It is highly likely that you have at some point purchased a home monitoring device connected to the Internet, such as an IP camera. And I’m also pretty sure you didn’t change the default password.
Such small devices are still computers that have been manufactured a long time ago and have been waiting on the shelf for months to be sold. At best, they are products that offer upgrades, but this is not the norm.
In short, you are buying an insecure device. And in the face of this, it is key to remember that all, absolutely all IoT devices are susceptible to problems of this kind.
In this video, I tell you about the measures I recommend you take to protect the security of IoT devices.