Microsoft referred to the attack as “nation-state threat actor activity” and said TP-Link made up most of the routers used. In May 2023, Check Point Research also identified a firmware implant in ...