Spam-spewing IoT botnet infects 100,000 routers using five-year-old flaw