9,000 Asus routers compromised by botnet attack and persistent SSH backdoor that even firmware updates can’t fix

Major Cybersecurity Breach: 9,000 ASUS Routers Targeted by Advanced Botnet Attack

In a concerning turn of events, a serious cybersecurity breach has reportedly compromised more than 9,000 ASUS routers, driven by a highly sophisticated botnet known as “AyySSHush.” This troubling discovery was made in March 2025 by the cybersecurity research firm GreyNoise, highlighting significant vulnerabilities within the routers’ authentication processes.

The crux of the issue lies in the botnet’s clever exploitation of legitimate features on these routers, allowing it to create a persistent SSH (Secure Shell) backdoor. What makes this breach particularly alarming is the backdoor’s strategic placement in the router’s non-volatile memory (NVRAM). This ensures that even if users attempt to rectify the situation through firmware updates or device reboots, the backdoor remains intact and accessible, complicating traditional methods of malware remediation.

This situation underscores the critical importance of maintaining robust cybersecurity measures, particularly in widely used consumer hardware. As the digital landscape continues to evolve, users must remain vigilant about their network security and keep abreast of the latest vulnerabilities that could threaten their devices and personal information.

Share this content:

Leave a Reply

Your email address will not be published. Required fields are marked *