9,000 Asus routers compromised by botnet attack and persistent SSH backdoor that even firmware updates can’t fix

Title: Major Cybersecurity Breach Affects 9,000 ASUS Routers: The Persistent Threat of AyySSHush

In a concerning development for digital security, over 9,000 ASUS routers have been compromised due to a sophisticated botnet attack known as “AyySSHush.” This robust threat emerged into the spotlight in March 2025, following an investigation by cybersecurity experts at GreyNoise.

The attack takes advantage of specific authentication vulnerabilities within the routers, enabling cybercriminals to leverage legitimate router functions to create a persistent SSH (Secure Shell) backdoor. This backdoor is embedded into the router’s non-volatile memory (NVRAM), a design flaw that allows it to remain undetected even through firmware updates and device reboots. As a result, conventional remedies that often resolve similar issues are rendered ineffective when dealing with this particular breach.

The implications of such a vulnerability are vast, underscoring the critical need for users to remain vigilant regarding their network security. As cyber threats continue to evolve, ensuring that routers and other network devices are properly secured and regularly updated is more important than ever.

For those using ASUS routers, immediate action is recommended. Stay informed about firmware updates, follow best practices for enhancing security, and consider utilizing additional security measures to help mitigate potential risks associated with this and similar threats.

Share this content:

Leave a Reply

Your email address will not be published. Required fields are marked *