https://www.bleepingcomputer.com/news/security/new-malware-infects-business-routers-for-data-theft-surveillance/

Its being actively discussed on the Facebook Group 'DrayTek admin, owners & users'

Sounds like DrayOS models are not impacted.....apparently.

I say apparently as we don't really know....the usual response from Draytek UK and TW is deafening so who knows what the attack vector is, what is and isn't vulnerable and what fix (if any) is coming and when.