DDoS attacks in 2022

guest · Aug 3, 2022

DDoS attacks in Q2 2022
August 3, 2022

Politically-motivated cyberattacks dominated the DDoS landscape in the second quarter of 2022 just as they did in the previous reporting period. ALtahrea Team, a group targeting NATO and its partners, attacked public transportation websites in Israel and the United Kingdom. Israel saw a cyberattack on the Airports Authority, and UK, an attack on the Port of London Authority. Also attributed to the group are cyberattacks on websites affiliated with the Turkish ministry of defense.
Click to expand...

Quarter trends
The second quarter of 2022 saw the continuation of a trend that began in spring: an increase in superlong attacks. These last so long that websites remain under stress continuously. Compared with the previous quarter, DDoS attacks faded from public view and amateur hacktivist attacks all but ceased. That said, they had done no major damage before, so the cessation had little effect from a DDoS defense perspective. But let us look at the figures.
Click to expand...

Quarter summary
In Q2 2022:
• Our DDoS Intelligence system recorded 78,558 DDoS attacks.
• 25% of the targets were located in the US, accounting for 45.95% of all attacks.
• June 20 and 21 were the wildest days, with 1815 and 1735 attacks, respectively, while April 10 and 11, and May 17 were the least turbulent ones, with 335, 294 and 267 attacks, respectively.
• Very short attacks made up 95.42% of the total number.
• 17% of the botnet C2 servers were located in the US.
• UDP flood accounted for 62.53% of attacks.
• 41% of the devices that attacked Kaspersky Telnet honeypots were located in China.
Click to expand...

Conclusion
The second quarter was calmer than the first in terms of DDoS attacks. This is nothing new: we always observe a drop in activity as summer nears. However, the changes in the number of attacks within the quarter did not conform to that trend: botnet activity grew steadily between April and June, following a slump at the end of the previous quarter.

The attack geography did not change significantly as compared to past reporting periods, but it is worth noting that attacks linked to concurrent geopolitical events may utilize specially created resources not accounted for in our botnet statistics.
Click to expand...

guest · Nov 9, 2022

DDoS attacks in Q3 2022
By Oleg Kupreev, Alexander Gutnikov, Yaroslav Shmelev - November 7, 2022

In Q3 2022, DDoS attacks were, more often than not, it seemed, politically motivated. As before, most news was focused on the conflict between Russia and Ukraine, but other high-profile events also affected the DDoS landscape this quarter.

The pro-Russian group Killnet, active since January 2022, took the responsibility for several more cyberattacks. According to the hacktivists themselves, more than 200 websites in Estonia fell victim to their attacks, including the ESTO AS payment system. In nearby Lithuania, the websites and e-services of the energy company Ignitis Group were hit. Both attacks were described by the affected organizations as the largest they’ve faced in the last 10–15 years.
Click to expand...

Quarter trends
The main surprise of Q3 2022 was the lack of surprises, which were continuously present since late 2021. But that doesn’t mean it was a dull quarter. Let’s take a look at the statistics.
Click to expand...

Quarter summary
In Q3 2022:
• Kaspersky’s DDoS Intelligence system detected 57,116 DDoS attacks.
• A total of 39.61 percent of targets, affected by 39.60 percent of attacks, were located in the US.
• The busiest day of the week (15.36 percent of attacks) was Friday and the calmest (12.99 percent) was Thursday.
• July saw the sharpest contrast: The 1st and 5th saw 1494 and 1492 attacks, respectively, and the 24th just 135.
• Attacks lasting less than four hours accounted for 60.65 percent of the total duration of attacks and for 94.29 percent of the total number of attacks.
• UDP flood accounted for 51.84 percent of the total number of attacks, and SYN flood for 26.96 percent.
• The country with the largest share of bots trying to hack into Kaspersky SSH honeypots was the US (17.60%).
Click to expand...

Conclusion
The situation in Q3 2022 points to a stabilization of the DDoS market after a tumultuous first half of the year, although it remains difficult. Yet the picture changes every quarter and forecasts remain tentative at best: pretty much anything can happen. That said, we don’t expect any significant surges or drops in Q4.

As for duration, here we can only guess: the DDoS market is still very far from the norm, and the length of attacks tends to jump up and down. We hope that Q4 shows relative stability in this regard, too, and does not try to break any records.
Click to expand...

Log in or Sign up

DDoS attacks in 2022

guest Guest

guest Guest

Log in or Sign up

DDoS attacks in 2022

guest Guest

guest Guest

Useful Searches