fullofquarksNov 21
Ars Technica
Thousands of hacked Asus routers are under control of suspected China-state hackers
So far, the hackers are laying low, likely for later use.
https://arstechnica.com/security/2025/11/thousands-of-hacked-asus-routers-are-under-control-of-suspected-china-state-hackers/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social
Nov 21 at 10:07pmArsBot 🤖
Show threadJuan Per¢ent,🇲🇽 🍉,🇻🇪Nov 21
@arstechnica OMG Devious hackers from China! Maybe Russians! Maybe sino-russians!! Or worse: CHINA STATE hackers. Allegedly.
Show threadCheekiNov 23
@dacig @arstechnica 😂😂😂 That's dumbfuckistani press at its finest
Show threadMaria Langer | 📝🛥️💎Nov 21
@arstechnica Seriously, I just replaced my old Asus router with a new Asus router 20 minutes ago.🙄
Show threadPtisanNov 22
@mlanger @arstechnica its probably fine. It looks like a lot of the older models (N/AC) are affected, not the newer ones (AX/BE)
Show threadxs4me2Nov 22

@arstechnica

So get rid of the stuff…

Show threadMeaningfulBitsNov 22
@arstechnica how deep is it? If I have an ASUS router with an aftermarket OS am I screwed?
Show threadSterlingNov 22
@arstechnica
@briankrebs
Maybe I'm slow, but I have several issues with the article.
1) These routers do not appear to be EOL. All are AC or AX. The ones I checked are still on Asus website.
2) It's not clear what software these routers were running. Stock Asus? WRT Merlin? If so what versions?
3) Does the vulnerability only apply to internet facing routers? i.e. what if they are used as wifi APs only? What if they are behind a firewall.
Show threadMichael HorowitzNov 22
@AG100pct @arstechnica @briankrebs excellent questions
Show threadHTPC NZNov 22
@arstechnica is it just me or every time I see "xyz" state hackers, first thing that comes to mind is this is definitely a CIA/NSA/MI6 or MOSAD operation that got comprised and now looking for a fall guy...
Show threadMcTwistNov 22
@arstechnica *Sits on an ASUS router, but flashed with #FreshTomato*
Show threadŠtěpán ŠkorpilNov 22

@arstechnica That's nothing new.
1️⃣ People buy antivirus software and install updates on their laptops, but never care about the router device, the gateway to the internet which is silently online 24/7
2️⃣ Manufacturers only provide one or two updates fixing some user facing features and done. No further security fixes.

That's why I am glad for #Turris. An open router running Linux, the OS I understand and that I use on all my PCs, laptops and servers (and soon phone I hope). With long software support. The first Turris I got is from 2015 and it still gets updates to the newest OpenWRT. ❤️