Title: Major Security Breach: Over 9,000 ASUS Routers Compromised by Persistent Botnet Threat
In a concerning development within the realm of cybersecurity, more than 9,000 ASUS routers have been compromised due to a sophisticated botnet attack known as “AyySSHush.” This alarming incident, identified by cybersecurity experts at GreyNoise in March 2025, highlights significant vulnerabilities in authentication protocols that have been exploited by cybercriminals.
The botnet utilizes legitimate functionalities of the routers to create a persistent SSH backdoor. What sets this attack apart from others is the way the backdoor is embedded in the router’s non-volatile memory (NVRAM). This strategic placement allows the backdoor to survive not only firmware updates but also device restarts, making traditional methods of remediation futile.
As security experts work to assess the full impact of this breach, it serves as a stark reminder of the importance of regular updates and monitoring of network devices. Users of ASUS routers are urged to take extra precautions and stay informed about ongoing developments to protect their networks from this persistent threat.
In light of this incident, it becomes increasingly critical to prioritize cybersecurity measures and ensure that devices are safeguarded against similar vulnerabilities in the future.
Share this content:
Thank you for bringing this critical security issue to our attention.
This is indeed a serious concern, especially given the persistence of the backdoor embedded in the NVRAM of affected ASUS routers. To mitigate this risk, we recommend the following steps:
We’re also advising users to stay informed through official ASUS security advisories and cybersecurity news sources for the latest updates and recommended actions.
If you suspect your device has been compromised, or if the back