WrtHug, a widespread compromise of ASUS routers (via AiCloud)

[XIII]

Yet another one, or did we already know about this one?

https://securityscorecard.com/wp-content/uploads/2025/11/STRIKE_Asus_WrtHug-Report_V6.pdf

 

[Ripshod]

Yet another one, or did we already know about this one?

https://securityscorecard.com/wp-content/uploads/2025/11/STRIKE_Asus_WrtHug-Report_V6.pdf

Old news, only now they've given it a name.
This document also states that asus have patched against these vulnerabilities.

 

[bennor]

Yet another one, or did we already know about this one?

https://securityscorecard.com/wp-content/uploads/2025/11/STRIKE_Asus_WrtHug-Report_V6.pdf

To save people the extra click. From the PDF:

Mitigation
All vulnerabilities in Operation WrtHug are known and ASUS has officially addressed and patched them. This aligns with our observation of the threat actor targeting outdated and EoL devices.

To further explore previous security advisories on the vulnerabilities leveraged in WrtHug, please view the ASUS product security advisory here or check how to make your devices more secure with the ASUS Support resource FAQ.