Mirai malware targets loT devices. After infiltration, it uses them to propagate and create botnets that then used to launch which types of attack?

A Man-in-the-Middle (MITM) attack involves intercepting communications between two parties; Mirai botnets are not designed or used for this purpose.

A birthday attack is a cryptographic technique that exploits hash collision probabilities and has no relationship to Mirai's botnet or DDoS functionality.

Mirai specifically scans the internet for IoT devices using default or weak credentials, infects them, and aggregates them into massive botnets. These botnets are then directed to flood target servers or infrastructure with traffic, constituting DDoS attacks. The 2016 attack on Dyn DNS infrastructure, which disrupted major internet services, is a well-known example of Mirai-driven DDoS activity.

While Mirai itself uses credential brute-forcing to propagate to new devices, the attack type the assembled botnet launches against external targets is DDoS, not password attacks.