Asus with Tomato here, no USB used and anything remote disabled.

Anyway, Kalroth just released a new version with a --no-client-reconnect command that should disable the attack.