Great in-depth article on the topic, with a list of targeted router brands and models. Scary that the article says "It's not yet clear if running the latest firmware and changing default passwords prevents infections in all cases."