Major Cybersecurity Breach: Over 9,000 ASUS Routers Compromised by Botnet Attack

In a alarming turn of events for consumer security, cybersecurity experts have uncovered a widespread incident affecting more than 9,000 ASUS routers. Dubbed “AyySSHush,” this sophisticated botnet attack exploits critical authentication vulnerabilities within these devices. The discovery, made by GreyNoise in March 2025, highlights the unnerving extent of modern cyber threats.

What sets this attack apart is the use of a persistent SSH backdoor that has been ingeniously embedded into the router’s non-volatile memory (NVRAM). This unique approach allows the malicious code to withstand firmware updates and even device reboots, making traditional security measures nearly ineffective in eradicating the threat.

The implications of such an intrusion are profound, as it not only compromises the routers themselves but also potentially exposes sensitive information and undermines the integrity of networks connected to these devices. Users are urged to remain vigilant and take proactive steps to secure their networks amidst this troubling revelation.

In light of this incident, it is imperative that ASUS customers implement immediate safeguards, including disabling remote access features and changing default passwords. As the cybersecurity landscape evolves, staying informed and proactive about device security is crucial in mitigating risks associated with such breaches.