A botnet functions in cybersecurity attacks by leveraging a network of compromised devices (bots) controlled by a single operator. These bots execute coordinated attacks, such as DDoS (Distributed Denial of Service) attacks, overwhelming targeted systems to disrupt services, steal data, or extort businesses and individuals.