Version 80: Over 9,000 Asus routers hacked via botnet infiltration and an enduring SSH backdoor resistant to firmware updates

Major Cybersecurity Breach: 9,000 ASUS Routers Compromised by Botnet Attack

In a troubling development for home and business network security, over 9,000 ASUS routers have been compromised in a sophisticated cyber attack. Known as “AyySSHush,” this botnet exploit was identified in March 2025 by the cybersecurity experts at GreyNoise.

The breach capitalizes on authentication vulnerabilities within the routers, leveraging built-in features to create a persistent SSH backdoor. What makes this situation particularly alarming is that the malicious backdoor is installed in the router’s non-volatile memory (NVRAM). This means that even after firmware updates or device restarts, the compromised backdoor remains intact, which severely limits conventional remediation efforts.

As users and network administrators grapple with this significant security threat, it is crucial to stay informed about the potential risks associated with compromised devices. The presence of such resilient threats highlights the necessity for enhanced security protocols and immediate action to safeguard network integrity.

For those operating ASUS routers, we recommend reviewing your device settings and considering additional security measures to protect against potential breaches. As cybersecurity continues to evolve, staying proactive is the key to safeguarding your connected devices.

Share this content:

Leave a Reply

Your email address will not be published. Required fields are marked *