Mēris and TrickBot standing on the shoulders of giants - Avast Threat Labs

The botnet is known to exploit a known vulnerability in the Winbox component of MikroTik routers (CVE-2018-14847), enabling the attackers to gain unauthenticated, remote administrative access to any affected device.