Hello Briton, I have been investigating this problem as well.
What router did you use? Can you share some additional information?
If memory serves, my was a TP-link TD8840-T. I’m trying to understand how exactly this router has been compromised.
Also, for the purpose of easier google hits, it was pulling 128.199.225.64 as primary DNS server. Reported to be located in Singapore.