Brian Krebs, whose site was taken down by the Mirai Botnet in September 2016, spent the last few months trying to figure out who was ultimately responsible for Mirai, and why it was launched. His conclusion: A Student At Rutgers, and The Minecraft Economy.
It is a long, but interesting, read.