I'm not talking about trying to crack the encryption key, but if malware got onto your computer, and attempted to brute force your router's login password. I know that the majority of people are using admin/password, but for those that aren't, do router's limit the number of login attempts? I only have one router to test, and it doesn't appear to restrict it. I was just wondering if anyone with more expertise with networking knew if there were security features to prevent this.
The only reason I could think of for doing this would be to keep persistent access in case of the malware being removed, once you have the credentials you can upload a malicious firmware, the router could launch attacks. Since the malware would already be on a computer behind the router, I couldn't think of another reason to infect it, except for maybe a botnet. I've heard of malicious firmware being used for stuff, but I doubt that much of the stuff littered across the internet would do something like this.