Major Cybersecurity Breach: Over 9,000 Asus Routers Compromised by Botnet Attack

In a concerning development for network security, more than 9,000 Asus routers have fallen victim to a sophisticated botnet attack identified as “AyySSHush.” This breach was uncovered in March 2025 by cybersecurity experts at GreyNoise, revealing a complex exploitation of vulnerabilities within the router’s authentication mechanisms.

The attack takes advantage of legitimate router functionalities, enabling hackers to create a persistent SSH backdoor. What makes this breach particularly alarming is that the backdoor is embedded within the router’s non-volatile memory (NVRAM). This allows it to survive firmware updates and device reboots, rendering traditional remediation efforts largely ineffective.

As cybersecurity increasingly becomes a pressing concern for both individuals and organizations, this incident underscores the critical importance of ensuring robust security measures are in place. Users of affected Asus routers are urged to implement immediate steps to secure their networks, including disabling remote access features, changing default passwords, and staying updated on patches from the manufacturer.

As the landscape of cyber threats evolves, this incident serves as a crucial reminder of the potential vulnerabilities present in seemingly secure devices. Vigilance and proactive security practices remain the best defense against such sophisticated attacks.