Look for unknown accounts in /user print .
A for your specific MikroTik model.
Instructions on how to your router without exposing it to attacks. mikrotik backup patched
Instead of just .backup files (which are binary), use the /export command. export file=my_config creates a readable script. Look for unknown accounts in /user print
Modern RouterOS versions use stronger hashing algorithms, making "brute-forcing" a stolen backup significantly harder. mikrotik backup patched