FWIW IOS backdoors were already being researched by 2003, this isn't surprising at all, and I imagine by now the true scope of the problem is a little bigger than a few routers
I recall there was a Swede (the grue?) on the Pull the Plug IRC network who was cross-compiling and linking in backdoored object code in Cisco IOS images already back in 2000.