Major Cybersecurity Breach: Over 9,000 ASUS Routers Compromised by Persistent Botnet Attack

In a troubling development for network security, a recent report has revealed that more than 9,000 ASUS routers have fallen victim to a sophisticated botnet attack identified as “AyySSHush.” This alarming incident was uncovered by the cybersecurity firm GreyNoise in March 2025 and highlights the growing challenges related to router security and vulnerabilities.

At the core of this attack is the exploitation of authentication weaknesses within the ASUS routers, allowing unauthorized access. The cybercriminals have leveraged genuine features of the routers to create a stealthy and enduring SSH backdoor. A particularly concerning aspect of this breach is the fact that the backdoor resides in the router’s non-volatile memory (NVRAM). This means that even if users attempt to enhance their security by applying firmware updates or rebooting their devices, the backdoor remains intact, effectively circumventing standard remediation efforts.

As more devices become interconnected in our daily lives, this incident serves as a crucial reminder of the importance of robust cybersecurity measures for consumer electronics. Users of ASUS routers are urged to stay vigilant and consider additional protective steps while awaiting guidance from ASUS on effective solutions to mitigate this serious vulnerability.

Stay informed and prioritize your network security to safeguard against evolving cyber threats.