Also in recent times the biggest DDoS attacks are done by Linux-based botnets. Typically the botnet operators use SSH brute forcing to infect everything from IoT devices to big servers.
However Linux is not to blame that it's used in idiotic IoT and server configurations.