AiCloud Service is a technology platform tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed November 19, 2025; most recent activity November 19, 2025.
AiCloud Service is a cloud-enabled platform embedded in ASUS routers that provides remote management and cloud connectivity for devices. The recent campaigns indicate attackers are abusing or targeting these cloud-enabled router features to compromise large numbers of end-of-life ASUS devices, highlighting a significant attack surface in consumer networking gear and the risk of cloud-managed router functionality being weaponized for persistence and control.
Asus has identified a critical authentication bypass vulnerability (CVE-2025-59367) affecting its DSL-AC51, DSL-AC750, and DSL-N16 router models. This flaw allows remote, unauthenticated attackers to gain full control…
Operation WrtHug has hijacked approximately 50,000 ASUS routers globally, primarily targeting end-of-life models. The campaign is believed to be linked to Chinese threat actors and exploits multiple vulnerabilities,…