9,000 Asus routers compromised by botnet attack and persistent SSH backdoor that even firmware updates can’t fix

Major Cybersecurity Breach: Over 9,000 ASUS Routers Compromised by Advanced Botnet Attack

In a troubling development for tech users, recent reports uncover a cybersecurity breach impacting more than 9,000 ASUS routers. This incident, identified in March 2025 by the cybersecurity company GreyNoise, revolves around a sophisticated botnet known as “AyySSHush.”

The attack capitalizes on specific authentication weaknesses, allowing cybercriminals to employ genuine router features to create a persistent SSH backdoor. What sets this backdoor apart is its location within the router’s non-volatile memory (NVRAM). This strategic positioning ensures that even standard firmware updates and device reboots fail to eliminate it, making conventional methods of remediation ineffective.

As technology continues to evolve, this incident serves as a stark reminder of the pressing need for robust cybersecurity measures in our networking devices. Users are encouraged to remain vigilant and explore additional security protocols to safeguard their systems against such persistent threats.

Share this content:

Leave a Reply

Your email address will not be published. Required fields are marked *