Internet-enabled devices are infected with malware to make them a bot. They are controlled as a group (botnet) to make repeated requests to a particular server. This flood of traffic crowds out normal users resulting in a 'denial of service'.