ASUS WRT Routers — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
7
occurrences
First Seen
November 19, 2025
Last Seen
November 26, 2025

ASUS WRT Routers is a technology platform tracked across 4 threat clusters and 7 intelligence report mentions on ThreatCluster. First observed November 19, 2025; most recent activity November 26, 2025.

Overview

ASUS WRT Routers is ASUS's router firmware/platform used in consumer-grade home gateways (including AiCloud features). The platform has recently been tied to large-scale exploitation by a Beijing-linked threat actor (WrtHug), targeting aging devices, and it faces a high-severity authentication bypass vulnerability in AiCloud, underscoring significant cybersecurity risk from unpatched, end-of-life equipment.

Related Threat Clusters

  • Critical Auth Bypass Vulnerability in Asus DSL Routers

    Asus has identified a critical authentication bypass vulnerability (CVE-2025-59367) affecting its DSL-AC51, DSL-AC750, and DSL-N16 router models. This flaw allows remote, unauthenticated attackers to gain full control…

    14 articles · Updated November 16, 2025
  • ASUS Issues Critical Security Alerts for AiCloud and DSL Routers

    ASUS has reported critical authentication bypass vulnerabilities affecting its AiCloud and DSL series routers. The vulnerabilities, tracked as CVE-2025-59366 and CVE-2025-59367, allow unauthenticated remote attackers to…

    9 articles · Updated November 28, 2025
  • Critical Authentication Bypass Flaw in Asus DSL Routers Discovered

    The Indian Computer Emergency Response Team (CERT-In) has issued a critical alert regarding an authentication bypass vulnerability, tracked as CVE-2025-59367, affecting several Asus DSL-series Wi-Fi routers. This flaw…

    5 articles · Updated November 21, 2025
  • Operation WrtHug Compromises Thousands of ASUS Routers Worldwide

    Operation WrtHug has hijacked approximately 50,000 ASUS routers globally, primarily targeting end-of-life models. The campaign is believed to be linked to Chinese threat actors and exploits multiple vulnerabilities,…

    9 articles · Updated November 21, 2025

Recent Intelligence Reports

  • ASUS warns of new critical auth bypass flaw in AiCloud routers — Bleepingcomputer · November 26, 2025
  • ASUS warns of new critical auth bypass flaw in AiCloud routers — Bleepingcomputer · November 26, 2025
  • New WrtHug campaign hijacks thousands of end-of-life ASUS routers — Bleepingcomputer · November 19, 2025
  • New WrtHug campaign hijacks thousands of end-of — Bleepingcomputer · November 19, 2025
  • 50k more ASUS routers pwned by evolving Beijing-linked op — Theregister · November 19, 2025
  • China-Linked Operation “WrtHug” Hijacks Thousands of ASUS Routers — Infosecurity-Magazine · November 19, 2025
  • Tens of thousands more ASUS routers pwned by suspected, evolving China operation — Theregister · November 19, 2025

CVSS v3.1 Breakdown