Reports indicate that MikroTik routers are currently being compromised through their internet-exposed SSH services. The attacks leverage an unauthenticated access vector, allowing threat actors to bypass typical security measures and gain full administrative control over affected devices. This exploitation has reportedly been active since at least September 2.