The shortlist includes three routers from D-Link (the DIR-818LW, DIR-850L, and DIR-860L), two Netgear models (the DGN2200v4 and AC1900 R7000), four from TP-Link (the Archer C20, TL-WR840N, TL-WR849N, and WR841N), and nine from Zyxel with the following model numbers: EMG6726-B10A, PMG5617GA, VMG1312-B10D, VMG1312-T20B, VMG3925-B10A, VMG3925-B10C, VMG4825-B10A, VMG4927-B50A, and VMG8825-T50K.
https://www.bgr.com/2128145/fbi-routers-targeted-by-massive-malware-operation/
https://www.bgr.com/2128145/fbi-routers-targeted-by-massive-malware-operation/