Over 9,000 Asus Routers Hijacked by Botnet and Unpatchable SSH Backdoor Despite Firmware Updates

Major Cybersecurity Breach: Over 9,000 ASUS Routers Compromised by Persistent Botnet Attack

In a troubling development for home and network security, cybersecurity experts have revealed that more than 9,000 ASUS routers have fallen victim to a complex botnet attack known as “AyySSHush.” This incident came to light in March 2025, following an in-depth investigation by the cybersecurity firm GreyNoise.

The essence of this attack lies in its exploitation of specific authentication vulnerabilities within the routers. By leveraging legitimate features of the devices, the botnet establishes a persistent SSH backdoor, which is alarmingly embedded within the router’s non-volatile memory (NVRAM). This design choice ensures that even firmware updates and device reboots do not eliminate the threat, ultimately undermining conventional methods of remediation.

The implications of such a breach are significant, as these routers can be manipulated for a variety of malicious activities, potentially jeopardizing the security and privacy of countless users. With the discovered backdoor proving resistant to standard safeguards, affected users are urged to take immediate action to secure their networks.

Stay informed and proactive regarding your digital security, especially if you’re utilizing ASUS hardware. Regularly monitor your devices and consider incorporating additional protective measures to safeguard against evolving cyber threats.

Share this content:

Leave a Reply

Your email address will not be published. Required fields are marked *