The VPNFilter botnet that was built by Russian cyberspies, which infected over 500,000 routers, was taken down last week by the FBI. New scans looked for Mikrotik routers with port 2000 exposed online, and only routers located on Ukrainian networks. Security researchers from JASK and GreyNoise Intelligence said they had detected the same threat actor that built the first iteration of the VPN filter botnet attempting to compromise new routers and build a new VPNFilter Botnet.
Source: https://www.bleepingcomputer.com/news/security/the-vpnfilter-botnet-is-attempting-a-comeback/