9,000 Asus routers compromised by botnet attack and persistent SSH backdoor that even firmware updates can’t fix

Title: Major Cybersecurity Breach: Over 9,000 ASUS Routers Compromised by Persistent Botnet

In a concerning development for network security, more than 9,000 ASUS routers have fallen victim to a sophisticated botnet attack identified as “AyySSHush.” This serious vulnerability came to light in March 2025, thanks to the efforts of the cybersecurity company GreyNoise.

The attack capitalizes on authentication weaknesses within the affected routers and leverages legitimate features to implant a persistent SSH backdoor. This backdoor is particularly alarming because it is stored in the non-volatile memory (NVRAM) of the router. As a result, it can survive firmware updates and device reboots, which means that traditional security procedures may not sufficiently mitigate the threat.

The implications of this incident are significant, as it not only compromises individual devices but also potentially jeopardizes the networks they support. Users of ASUS routers are urged to remain vigilant and take proactive measures to secure their devices, as this vulnerability underscores the importance of robust cybersecurity practices in today’s increasingly connected world.

In light of this breach, it is crucial for both individual users and organizations to understand the necessary steps to safeguard their networks. Keeping your firmware up to date, regularly monitoring network activity, and considering the use of additional security measures can significantly reduce the risk of similar attacks in the future.

Share this content:

Leave a Reply

Your email address will not be published. Required fields are marked *