There's a story on The Register (here: https://www.theregister.co.uk/2018/03/09/slingshot_malware_uses_cunning_plan_to_find_a_route_to_sysadmins/) 

that someone has build custom malware to run in Microtik routers and designed to get at the sysadmin accessing it. Microtik have released patches.

Patch quick!