From zdnet.com
Other router models have also been targeted, such as ARG, DSLink, Secutech, and TOTOLINK.
For the past three months, a cybercrime group has been hacking into home routers –mostly D-Link models– to change DNS server settings and hijack traffic meant for legitimate sites and redirect it to malicious clones.
The attackers operate by using well-known exploits in router firmware to hack into vulnerable devices and make silent changes to the router’s DNS configuration, changes that most users won’t ever notice.
Targeted routers include the following models (the number to the side of each model lists the number of internet-exposed routers, as seen by the