Hackers are attacking a critical zero-day flaw in unsupported D-Link DSL routers to run arbitrary commands.