AiCloud Service is a cloud-enabled platform embedded in ASUS routers that provides remote management and cloud connectivity for devices.
Overview
AiCloud Service is a cloud-enabled platform embedded in ASUS routers that provides remote management and cloud connectivity for devices. The recent campaigns indicate attackers are abusing or targeting these cloud-enabled router features to compromise large numbers of end-of-life ASUS devices, highlighting a significant attack surface in consumer networking gear and the risk of cloud-managed router functionality being weaponized for persistence and control.
Related Threat Clusters
-
Critical Auth Bypass Vulnerability in Asus DSL Routers
Asus has identified a critical authentication bypass vulnerability (CVE-2025-59367) affecting its DSL-AC51, DSL-AC750, and DSL-N16 router models. This flaw allows remote, unauthenticated attackers to gain full control…
14 articles · Updated November 16, 2025 -
Operation WrtHug Compromises Thousands of ASUS Routers Worldwide
Operation WrtHug has hijacked approximately 50,000 ASUS routers globally, primarily targeting end-of-life models. The campaign is believed to be linked to Chinese threat actors and exploits multiple vulnerabilities,…
9 articles · Updated November 21, 2025
Recent Intelligence Reports
- New WrtHug campaign hijacks thousands of end-of-life ASUS routers — Bleepingcomputer · November 19, 2025
- 50k more ASUS routers pwned by evolving Beijing-linked op — Theregister · November 19, 2025