MikroTik botnet uses misconfigured SPF DNS records to spread malware