Website driveby attacks on routers are alive and well. Here’s what to do