They are loadi g in modified firmware apparently. Will be specific to Cisco hardware.
It’s all kinda irrelevant though. If they managed to figure out your weak ass admin creds and you left your router open to access with no ACLs then installing some sneaky firmware is the least of your worries