Version 22: Over 9,000 Asus routers infected by a botnet assault and stubborn SSH backdoor immune to firmware patches

Title: Major Security Breach: Over 9,000 ASUS Routers Compromised by Botnet Attack

In a troubling development for cybersecurity, over 9,000 ASUS routers have fallen victim to a sophisticated and far-reaching attack by a botnet identified as “AyySSHush.” The breach was uncovered by cybersecurity experts at GreyNoise in March 2025, highlighting serious flaws in router authentication that have allowed malicious actors to gain access to these devices.

At the heart of this attack lies a persistent SSH backdoor that is cleverly embedded within the router’s non-volatile memory (NVRAM). This unique feature means that even if users attempt to rectify the situation through firmware updates or device reboots, the vulnerability remains intact. Traditional methods of defense simply do not apply in this scenario, marking a concerning evolution in how cybercriminals operate and maintain access to compromised systems.

The implications of this breach are significant, as these routers are commonly utilized in homes and businesses alike, potentially exposing sensitive personal and corporate data to unauthorized access. As the situation unfolds, it is crucial for ASUS router users to remain vigilant and seek updates from official sources on how best to protect their networks.

This incident serves as a crucial reminder of the importance of robust cybersecurity measures and the need for manufacturers to prioritize security in their device designs. Those who rely on ASUS routers should stay informed about developments in this ongoing investigation and consider additional protective measures to safeguard their networks against potential threats.

Share this content:

Leave a Reply

Your email address will not be published. Required fields are marked *