9,000 Asus routers compromised by botnet attack and persistent SSH backdoor that even firmware updates can’t fix

Title: Major Security Breach: Over 9,000 ASUS Routers Exploited by AyySSHush Botnet

In a troubling turn of events for network security, more than 9,000 ASUS routers have fallen victim to a sophisticated botnet attack known as “AyySSHush.” This cyber intrusion was first identified by the cybersecurity firm GreyNoise in March 2025 and reveals significant vulnerabilities in router security protocols.

The AyySSHush botnet exploits authentication weaknesses within the ASUS routers, leveraging legitimate functionalities to create a persistent SSH backdoor. What makes this situation particularly alarming is the nature of the backdoor; it is embedded within the router’s non-volatile memory (NVRAM). Consequently, this means that even firmware updates and device reboots cannot eliminate this unauthorized access point, effectively undermining traditional security measures.

The implications of this incident are vast, raising concerns about the security of home and small business networks that rely on ASUS routers for connectivity. Users are strongly advised to take immediate action by reviewing their router settings and considering alternative security measures. As the landscape of cybersecurity continues to evolve, incidents like these emphasize the importance of proactive monitoring and timely Software updates.

Staying informed about potential vulnerabilities and implementing robust security practices can help safeguard your network against threats like AyySSHush. We recommend keeping all devices updated and consulting with cybersecurity experts if you suspect that your router may be compromised.

Share this content:

Leave a Reply

Your email address will not be published. Required fields are marked *