Hacked and Attacked: Stealthy Malware Turns ASUS Routers Into Backdoor Bonanza!
GreyNoise has uncovered a stealth malware campaign converting ASUS routers into backdoor nodes since March, using brute-force logins and old bugs. Dubbed “AyySSHush,” it creates a resilient botnet, surviving firmware upgrades and reboots. With 9,000 routers compromised, it’s perfect for future hacking escapades. Who knew routers had such a social life?
Hot Take:
In a world where your toaster might be plotting against you, our trusty routers have joined the rebellion! Who knew ASUS routers would moonlight as secret agents in their downtime? With ‘AyySSHush,’ these routers aren’t just connecting your devices to the internet; they’re auditioning for the next spy thriller! It’s official, folks: your Wi-Fi is now a covert operative!
Key Points:
- GreyNoise uncovers a stealth malware campaign targeting ASUS routers, termed ‘AyySSHush.’
- The campaign uses brute-force logins, old authentication bypass vulnerabilities, and a 2023 command-injection bug.
- About 9,000 ASUS routers are already compromised, forming a resilient network ideal for future cyber mischief.
- French security firm Sekoia identifies a related campaign by ‘ViciousTrap,’ targeting over 5,500 edge devices.
- GreyNoise’s anomaly detection engine identified the attack pattern by analyzing unusual HTTP POST requests.
Already a member? Log in here