Which routers are affected ?
https://arstechnica.com/security/2024/05/mystery-malware-des...
“This included a drop of ~480k devices associated with Sagemcom, likely the Sagemcom F5380 as both this model and the ActionTec modems were both modems issued by the ISP.”