1. Over 9,000 Asus routers infiltrated by a botnet and an enduring SSH backdoor resistant to firmware patches 2. Massive botnet assault targets more than 9,000 Asus routers, exploiting a persistent SSH vulnerability immune to updates 3. Asus router network breach: 9,000+ devices affected by a relentless SSH backdoor and botnet intrusion that firmware updates can’t mitigate 4. Critical security flaw affects over 9,000 Asus routers, with a stubborn SSH backdoor and botnet infection unaffected by firmware fixes 5. 9,000 Asus devices compromised through a botnet and a persistent SSH security hole that resists firmware remediation 6. Widespread attack hits 9,000+ Asus routers via botnet and a durable SSH backdoor impervious to firmware upgrades 7. Over 9,000 Asus routers under siege: botnet infiltration coupled with a resilient SSH backdoor that firmware updates cannot resolve 8. Major security breach involving 9,000 Asus routers, featuring a tenacious SSH backdoor and botnet attack resistant to firmware patches 9. Asus router vulnerability affects more than 9,000 units, with a persistent SSH backdoor and botnet compromise immune to firmware fixes 10. 9,000-plus Asus routers compromised by continuous botnet attack and an SSH backdoor that updates fail to eliminate 11. Widespread exploitation of Asus routers: 9,000 devices compromised by botnets and a stubborn SSH backdoor unaffected by firmware updates 12. Over 9,000 Asus routers targeted by advanced botnet threats and a persistent SSH backdoor resistant to firmware-based solutions 13. Long-lasting SSH backdoor and botnet infection impact over 9,000 Asus routers, immune to firmware update remedies 14. Security breach concerns for 9,000 Asus routers due to a resilient SSH backdoor and botnet attack that firmware updates can’t patch 15. More than 9,000 Asus routers affected by a persistent backdoor and botnet assault, unremedied by standard firmware updates

BCAdminJun 10, 2025

Major Security Breach: Over 9,000 Asus Routers Infected by Persistent Botnet Attack

In a troubling development for network security, more than 9,000 Asus routers have been compromised by a sophisticated botnet known as “AyySSHush.” This alarming breach was uncovered in March 2025 by the cybersecurity firm GreyNoise, highlighting significant vulnerabilities in authentication protocols within the affected devices.

The botnet takes advantage of legitimate features within the routers to create a persistent SSH backdoor, which is deeply embedded within the router’s non-volatile memory (NVRAM). This clever approach allows the malicious code to survive standard firmware updates and even routine device reboots, making conventional remediation strategies largely ineffective.

As the shadow of this security incident looms, it serves as a stark reminder of the necessity for vigilant cybersecurity measures and regular updates to combat evolving threats in our increasingly connected digital world. Router users are encouraged to remain proactive and informed about their devices’ security status to avoid potential exploitation.

Share this content: