What specific techniques did the 'Riot' group use to maintain and expand their botnet?

The 'Riot' group reportedly used various methods to acquire and maintain their botnet, including compromising legitimate devices through malware, purchasing botnet access, and recruiting individuals to run infected machines. They also employed techniques to obfuscate their activities and evade detection.