I think this one is interesting.
It seems foreign adversaries are leveraging our high rate of Internet use against us and others, in fact, anyone the adversary wishes. Specifically targeting consumer-level (small office/home office or SOHO) routers , they seek to increase their infection rate and avoid professional detection and countermeasures.
The linked article suggests power cycling your router and looking for processes running under the name "vpnfilter".