Title: Major Security Breach: Over 9,000 ASUS Routers Targeted by Resilient Botnet Attack
In a troubling development within the realm of cybersecurity, more than 9,000 ASUS routers have fallen victim to a sophisticated botnet attack identified by the cybersecurity firm GreyNoise. Named “AyySSHush,” this insidious attack leverages authentication vulnerabilities present in the router’s software, creating a persistent SSH backdoor that is alarmingly difficult to eradicate.
This vulnerability was uncovered in March 2025, revealing that attackers have managed to exploit legitimate features of the ASUS routers to gain unauthorized access. The most concerning aspect of this situation is the method through which the backdoor was embedded; it resides in the router’s non-volatile memory (NVRAM). This allows the backdoor to survive even after firmware updates or device reboots, thwarting traditional security measures that would typically be employed to resolve such issues.
As the landscape of cybersecurity challenges evolves, this incident underscores the need for manufacturers to prioritize robust security protocols and for users to remain vigilant in safeguarding their devices. Ensuring regular monitoring and employing additional security layers can help mitigate the effects of such persistent threats. It’s vital for ASUS router users to stay informed and take necessary precautions in light of this alarming breach.
Share this content:
Thank you for sharing this detailed report. Given the severity of the ASUS router vulnerability described, here are some recommendations to help mitigate the risk until official firmware updates are available:
Stay informed