Operation WrtHug hijacks 50,000+ ASUS routers to Bìbuild global botnet

Securityaffairs.Co •Pierluigi Paganini • November 19, 2025

Operation WrtHug hijacks tens of thousands of outdated ASUS routers worldwide, mainly in Taiwan, the U.S., and Russia, forming a large botnet. A new campaign called Operation WrtHug has compromised tens of thousands of outdated or end-of-life ASUS routers worldwide, mainly in Taiwan, the U.S., and Russia, pulling them into a large malicious network. SecurityScorecard […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Operation WrtHug Compromises Over 50,000 ASUS Routers Globally Operation WrtHug has compromised over 50,000 outdated ASUS routers, primarily in Taiwan, the U.S., and Russia, forming a significant botnet. The operation exploits multiple vulnerabilities in end-of-life devices, enabling attackers to hijack these routers and integrate them into a malicious network. 4 sources 55

Extracted Entities

Operation WrtHug hijacks 50,000+ ASUS routers to Bìbuild global botnet

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Companies (1)

Countries (2)

Platforms (1)