https://www.theregister.co.uk/2018/09/27/fancy_bear_modules/

Cunning malware VPNFilter remains under active development, and is acquiring ever more dangerous features.

That's the conclusion Cisco's Talos Intelligence security team reached after delving into recent samples and identifying seven “third-stage VPNFilter modules that add significant functionality to the malware”.