A sophisticated hacking campaign compromised ~9,000 ASUS routers using a persistent SSH backdoor that survives reboots and firmware updates. The attack, likely state-sponsored, avoids detection by using legitimate router features.