Cyber-espionage groups are using hacked routers more and more during their attacks, researchers at Kaspersky Lab say. The number of APTs leveraging routers for attacks has gone steadily up in the past year. The Slingshot APT (believed to be a US Army JSOC operation targeting ISIS militants) has used hacked MikroTik routers to infect victims with malware. More incidents still need to be investigated, such as the mysterious case of synchronized router reboots for a prominent router brand.
Source: https://www.bleepingcomputer.com/news/security/cyber-espionage-groups-are-increasingly-leveraging-routers-in-their-attacks/