Akamai: DDoS attacks on the rise, become more specialized

guest · Jun 27, 2018

Akamai: DDoS attacks on the rise, become more specialized
Akamai's new State of the Internet/Security: Web Attack report says DDoS attacks increased 16% since 2017.
It also says China and Russia launch the most credential abuse attacks on the hospitality industry.
June 26, 2018
https://www.csoonline.com/article/3...ind-most-credential-abuse-attacks-report.html

Cyber defenders need to stay on their toes, as DDoS attacks are still on the rise. According to Akamai Technologies’ Summer 2018 State of the Internet/Security: Web Attack report, the number of recorded DDoS attacks increased 16 percent since last year, and attackers are devising new and advanced DDoS methods.
2 uncommon DDoS attack examples
DDoS is not solely about volume to clog the pipes. Akamai described two uncommon, adaptable and interesting attack patterns that proves that.
Hospitality industry: China, Russia fingered for most credential abuse attacks
The report also drilled down into attacks directed against the hospitality industry, analyzing 112 billion bot requests and 3.9 billion malicious login attempts against sites belonging to airlines, cruise lines, hotels, online travel, automotive rental and transport organizations.

“Approximately half of the credential abuse traffic from Russia, China, and Indonesia is aimed at hotels, cruise lines, airlines, and travel sites,” according to Akamai.
Click to expand...

Minimalist · Jul 24, 2018

DDoS attacks in Q2 2018

Q2 2018 news includes: non-standard use of old vulnerabilities, new botnets, the cutthroat world of cryptocurrencies, a high-profile DDoS attack (or not) with a political subtext, the slashdot effect, some half-baked attempts at activism, and a handful arrests. But first things first.
Click to expand...

https://securelist.com/ddos-report-in-q2-2018/

guest · Aug 8, 2018

DDoS Attacks Less Frequent But Pack More Punch: Report
August 08, 2018
https://www.securityweek.com/ddos-attacks-less-frequent-pack-more-punch-report

According to the security company’s latest threat intelligence report, the number of large DDoS attacks jumped from 7 to 47 year-over-year in the first half of 2018, and the average DDoS attack size grow 174% during that period. The overall frequency of attacks, however, went down 13%.

The overall assault size was driven by novel techniques and has seen an increase of 37% since memcached appeared (memcached amplification fueled a 1.7 Tbps attack earlier this year). Between March and June 2018, the number of vulnerable (and accessible) memcached servers dropped from 17,000 to 550.

Although it has been used for reflection/amplification for years, Simple Service Discovery Protocol (SSDP) has received increased attention this year, when it was used to deliver traffic from ephemeral source ports. There are around 33,000 SSDP reflectors that could be abused in attacks, the report reveals (PDF). [...]
Click to expand...

Report (PDF): https://www.netscout.com/sites/default/files/2018-08/NETSCOUT_ThreatReport_FINAL_080618b.pdf

guest · Aug 21, 2018

Loss of Customer Trust and Confidence Biggest Consequence of DDoS Attacks
August 21, 2018
https://www.infosecurity-magazine.com/news/loss-trust-confidence-ddos/

A new study from Corero Network Security has revealed that the most damaging consequence of a distributed denial-of-service (DDoS) attack for a business is the erosion of customer trust and confidence.

The firm surveyed IT security professionals at this year’s Infosecurity Europe, with almost half (42%) of respondents stating loss of customer trust and confidence as the worst effect of suffering DDoS, with just 26% citing data theft as the most damaging.

Third most popular among those polled was potential revenue loss (13%), followed by the threat of intellectual property theft (10%).

“With our digital economy utterly dependent upon access to the internet, organizations should think carefully about taking steps to proactively protect business continuity, particularly including DDoS mitigation.”
Click to expand...

guest · Sep 11, 2018

Public cloud services used to boost DDoS attacks
September 11, 2018
https://betanews.com/2018/09/11/public-cloud-boost-ddos/

Hackers are increasingly abusing public cloud services in order to launch DDoS attacks, according to new research.

The study from anti-DDoS company Link11 shows that a quarter of all DDoS attacks in Europe in the 12 months from July 2017 to June 2018 used public cloud server-based botnets, compared to 18.5 percent in the previous 12 months.

Microsoft Azure was the cloud service most exploited for DDoS attacks over this period, with 38.7 percent of such attacks using Azure servers on average. Amazon Web Services (AWS) was used in 32.7 percent of attacks, and Alibaba servers used in 17.9 percent. Google servers were abused much less often, used in only 10.7 percent of attacks.

Cloud instances generally offer bandwidths of between one and 10 Gbps, enabling attack volumes which can be as much as 1000 times higher than is possible with individual compromised devices such as home routers or IoT cameras. [...] You can find out more on the Link11 website.
Click to expand...

guest · Nov 20, 2018

European DDoS attack volumes more than double
November 20, 2018
https://betanews.com/2018/11/20/ddos-attack-volumes-double/

The report from DDoS protection specialist Link11 shows the average attack volume more than doubled in July, August and September, to 4.6 Gbps (up from 2.2 Gbps in Q2).

Attacks are also becoming increasingly complex, with 59 percent of incidents using two or more vectors -- up from 46 percent in Q2. The highest-volume attack observed by Link11 in 2018 rose to 371 Gbps in Q3, an increase of 75 percent compared to the maximum of 212 Gbps observed in Q1. In addition, there were a further 35 attacks with bandwidth peaks above 100 Gbps.

"Over half of attacks during Q3 were multi-vector, making them harder to defend against, and they are growing in volume, too, meaning they can easily overwhelm defenses. [...]"
Click to expand...

You can find more data on current DDoS attack trends on the Link11 blog.
Click to expand...

guest · Jan 31, 2019

Imperva mitigated DDoS attack generated 500 Million Packets per Second, the largest ever
January 31, 2019
https://securityaffairs.co/wordpress/80492/hacking/ddos-500m-pps.html

Earlier this month, the cyber security software and services company Imperva mitigated an attack against one of its clients that exceeded 500 million packets per second. This attack was a SYN flood DDoS and it is the largest DDoS attack by packet volume ever observed.

The attacker sent both a flood of normal SYN packets and a large SYN flood
using two previously known tools.
The attacker used highly randomized and likely spoofed set of source ports and addresses to send packets of between 800 and 900 bytes.

According to the experts, the two tools used in the attack were developed by two different individuals, and the attacker combined them in the January attack.
Click to expand...

guest · Apr 15, 2019

Rogue Waves: Preparing the Internet for the Next Mega DDoS Attack
Why many attack techniques can be reused – but organizations can’t defend against them
April 15, 2019
https://threatpost.com/future-mega-ddos-attacks/143752/

When you think of a distributed denial-of-service (DDoS) attack at this point in the age of the internet, you might be thinking they’re old news. But when a multi-million-dollar business can be easily taken offline by an unskilled adversary and a $5 rent-a-DDoS service, I would argue that the issue is still very much relevant.

In this article I’ll be talking about some of the attack vectors we are most likely to see in the next 12 months, and I’ll carefully analyze some of the most recent and successful adversarial groups and the types of attacks they deployed for maximum impact.
More importantly, I’ll talk about why many of those same attack techniques can still be carried out with little to no ability for organizations to defend against them on their own.

[...] I think attackers are going to generate the next 1 Tbps + DDoS attack from an area of the world with high bandwidth and poor configuration and deployment practices, where the attacker can generate raw traffic directly from a home user network against a target network or website.
Click to expand...

guest · Apr 24, 2019

Major DDoS attacks increased 967% this year
DDoS attacks sized 100Gbps and higher exploded in Q1 2019, with 77% of all attacks targeting two or more vectors
April 24, 2019
https://www.techrepublic.com/article/major-ddos-attacks-increased-967-this-year/

Distributed Denial of Service (DDoS) attacks are increasing in size and frequency, as multi-vector exploits become more of the norm in hacker's efforts to distract and confuse security teams, while damaging their businesses, according to a Wednesday report from Neustar Research.

Attacks sized 100Gbps and higher increased by 967% in Q1 2019 compared to Q1 2018, the report found. The largest attack measured—587Gbps—was more than 70% larger than the biggest attack in the same period in 2018 (345Gbps).

While the largest DDoS attacks experienced the most growth, smaller attacks also increased exponentially, according to the report. Attacks under 5Gbps increased by 257% in the last year.
Targeted subnets and classless inter-domain routing (CIDR) blocks to slow or stop network traffic was one highly disruptive DDoS threat, according to the report.
Click to expand...

Neustar Research: New Cyber Threats Report Reveals that DDoS Attacks Still Challenging
"Q1, 2019 Cyber Threats & Trends Report" (PDF - 1.73 MB): https://ns-cdn.neustar.biz/creative_services/biz/neustar/www/resources/whitepapers/it-security/neustar-cyber-threats-and-trends-report-q1-2019.pdf

guest · May 1, 2019

Updated: This DDoS Attack Unleashed the Most Packets Per Second Ever. Here’s Why That’s Important.
April 30, 2019
https://www.imperva.com/blog/this-d...ts-per-second-ever-heres-why-thats-important/

However, in DDoS attack mitigation, it’s not the amount of bandwidth that matters – it’s the absolute number of packets directed at a network or web site. Packets per second is the true measure of the attack intensity, and that is what is difficult to block and recover from.

In January 2019, Imperva’s DDoS Protection Service mitigated a DDoS attack against one of our clients which crossed the 500 million packets per second (Mpps) mark. That’s more than four times the volume of packets sent at GitHub last year and we believe at the time was the largest PPS attack publicly disclosed (see bottom of post to learn about a recent even larger attack we recorded).

When we investigated, we realized the attack wasn’t generated using new tools, but two common older ones: one for the syn attack and the other for the large syn attack.
One possible hypothesis is that these tools, although used in the same attack, were written by two different individuals and then combined to form an arsenal and launch the most intensive DDoS attack against Network infrastructure in the history of the Internet.
Click to expand...

On April 30th, 2019, we recorded an even larger-by-PPS-volume attack against one of our clients. This attack peaked at 580 million packets per second. Using our new common mitigation state (CMS) feature, our DDoS Protection service was able to escalate and mitigate this attack even faster.
Click to expand...

guest · Jul 24, 2019

Mirai-Like Botnet Wages Massive Application-Layer DDoS Attack
IoT botnet-made up mainly of routers-hit a service provider with nearly 300,000 requests-per-second in a 13-day deluge of data
July 24, 2019
https://www.darkreading.com/attacks...-application-layer-ddos-attack/d/d-id/1335331

A collection of more than 400,000 connected devices - mainly home routers - for 13 days leveled a powerful application-layer attack on a online entertainment-service provider.
The attack used packets designed to appear as valid requests to the targeted application with the aim of chewing up bandwidth and server resources and reached a peak rate of 292,000 requests per second, according to a report released on July 24 by security firm Imperva, which blocked the attack.

Distributed denial-of-service attacks are now considered the cost of doing business online, and companies need to plan for the attacks.
In a survey released on July 24, data-center services firm US Signal found that 83% of organizations had suffered a DDoS attack in the past two years, and the average downtime caused by such an attack was 12 hours.

Because of the large number of Internet-of-things devices — tens of billions of network-connected devices by most accounts — and the lack of security concerns of most manufacturers and consumers, the population of vulnerable devices will only likely continue to grow, Imperva said.
Click to expand...

Imperva: Imperva Blocks Our Largest DDoS L7/Brute Force Attack Ever (Peaking at 292,000 RPS)

guest · Aug 22, 2019

The Largest DDoS Attacks & What You Can Learn From Them
August 21, 2019
https://blog.sucuri.net/2019/08/largest-ddos-attack.html

Denial-of-Service Attacks result in two ways —they either flood services or crash services. Attackers execute DDoS through computers and smart devices. Given this, it’s common for attackers to make use of IoT devices that are internet-accessible.

According to TechRepublic, in Q1 2019, there was an increase of 967% for attacks sized 100Gbps or higher, compared to Q1 2018. The largest attack was 70% larger than the biggest one for the same period in 2018, with 587Gbps compared to that of 345Gbps.
The Top 4 Largest DDoS Attacks
Have you ever wondered what the top 4 largest DDoS attacks were? In this post, we will dive into what the largest DDoS attacks looked like. [...]
Click to expand...

guest · Aug 27, 2019

Protocol used by 630,000 devices can be abused for devastating DDoS attacks
Security researchers warn that the WS-Discovery protocol is currently being abused for massive DDoS attacks
August 27, 2019
https://www.zdnet.com/article/proto...s-can-be-abused-for-devastating-ddos-attacks/

Security researchers are sounding the alarm about the Web Services Dynamic Discovery (WS-DD, WSD, or WS-Discovery) protocol, which they say can be abused to launch pretty massive DDoS attacks.
ZDNet first learned that this protocol was being used to launch DDoS attacks back in May, but we decided not to publish anything about it, to avoid bringing unnecessary attention to a protocol that was ripe for abuse but was still flying under the radar.

The good news is that there have been very few WS-Discovery DDoS attacks with amplification factors of 300 or 500, which appear to be the oddity, rather than the norm.
According to ZeroBS GmbH, a cyber-security firm that's been tracking the recent wave of WS-Discovery DDoS attacks that have taken place this month, a more common amplification factor was a normal one of up to 10.

However, the large number of devices that are currently exposing the WS-Discovery port 3702 on the internet will make this protocol a favorite among botnet operators in the coming months.
Click to expand...

guest · Sep 18, 2019

mood said: ↑

Security researchers warn that the WS-Discovery protocol is currently being abused for massive DDoS attacks
Click to expand...

Clever New DDoS Attack Gets a Lot of Bang for a Hacker's Buck
By exploiting the WS-Discovery protocol, a new breed of DDoS attack can get a huge rate of return
September 18, 2019
https://www.wired.com/story/ddos-attack-ws-discovery/

On Wednesday, researchers from Akamai's DDoS mitigation service Prolexic detailed a 35 gigabit per second attack against one of its clients at the end of August. Compared to the most powerful DDoS attacks ever recorded, which have topped 1 terabit per second, that might not sound like a lot. But the attackers used a relatively new technique—one that can potentially yield a more than 15,000 percent rate of return on the junk data it spews at a victim.

The new type of attack feeds on vulnerabilities in the implementation of the Web Services Dynamic Discovery protocol. WS-Discovery lets devices on the same network communicate, and can direct them all to ping one location or address with details about themselves.
Attackers can manipulate WS-Discovery by sending these specially crafted malicious protocol requests to vulnerable devices like CCTV cameras and DVRs. And because WS-Discovery is built on a network communication protocol known as User Datagram Protocol, the probes can spoof their IP address to make it look like the request came from a target's network.

The Akamai researchers also point out that if botnet operators start automating the process of generating WS-Discovery DDoS attacks, the barrages will crop up even more. Mursch says he sees evidence that's already happening.
Click to expand...

Akamai: New DDoS Vector Observed in the Wild: WSD attacks hitting 35/Gbps

guest · Oct 3, 2019

macOS systems abused in DDoS attacks
Up to 40,000 macOS systems expose a particular port online that can be abused for pretty big DDoS attacks
October 3, 2019
https://www.zdnet.com/article/macos-systems-abused-in-ddos-attacks/

DDoS-for-hire services, also known as DDoS booters, or DDoS stressors, are abusing macOS systems to launch DDoS attacks, ZDNet has learned.

These attacks are leveraging macOS systems where the Apple Remote Desktop feature has been enabled, and the computer is accessible from the internet, without being located inside a local network, or protected by a firewall.
More specifically, the attackers are leveraging the Apple Remote Management Service (ARMS) that is a part of the Apple Remote Desktop (ARD) feature.

Most DDoS amplification attacks observed in the wild have an amplification factor of between 5 and 10. The higher the protocol, the more useful it is for attackers.
According to security researchers from Netscout, who saw the first ARMS-based DDoS attacks in June, ARMS commands an impressive 35.5 amplification factor.
Click to expand...

guest · Feb 6, 2020

2019 Global DDoS Threat Landscape Report
February 4, 2020
https://www.imperva.com/blog/2019-global-ddos-threat-landscape-report/

Today Imperva Research Labs, made up of senior researchers and industry experts who have been delivering sound and valid advice for over 15 years, is releasing a brand new Global DDoS Threat Landscape Report. The report is a statistical analysis of 3,643 network layer DDoS attacks throughout 2019 and 42,390 application layer DDoS attacks mitigated by Imperva from May to December 2019.

2019 saw the largest network and application layer attacks ever recorded, with a network layer DDoS attack that reached 580 million packets per second (PPS) in April, and a separate application layer attack which lasted for 13 days and peaked at 292,000 Requests Per Second (RPS).

While most network attacks were short, with 51% lasting less than 15 minutes, the vast majority were also persistent and aimed at the same targets.
We can theorize that the motivation here is attackers aiming to cause as much disruption as possible before their target’s DDoS mitigation service jumped into action.
Click to expand...

guest · Feb 8, 2020

mood said: ↑

2019 Global DDoS Threat Landscape Report
February 4, 2020
Click to expand...

Porn Sites Suffer Highest Number of DDoS Attacks
February 6, 2020
https://www.infosecurity-magazine.com/news/porn-sites-suffer-highest-number/

A new study focused on distributed denial of service (DDoS) attacks has found that pornographic websites received by far the most attacks per site last year.

Over the same period, the sites that received the second- and third-highest number of DDoS attacks were gaming and news industry websites, which received on average 13.33 and 10.16 attacks per site, respectively.

"Every adult site we tracked over the course of the year experienced an average 84 attacks which, between May and December, equates to 10.5 attacks per site each month," wrote researchers.
Click to expand...

guest · Feb 19, 2020

16 DDoS attacks take place every 60 seconds, rates reach 622 Gbps
February 18, 2020
https://www.zdnet.com/article/16-ddos-attacks-take-place-every-60-seconds-rates-reach-622-gbps/

Two-thirds of customer-facing enterprise systems are bearing the majority of Distributed Denial-of-Service (DDoS) attacks, of which 8.4 million were recorded in 2019 alone.

DDoS attacks continue to be a thorn in the side of enterprise companies and according to Netscout's latest report on the topic, attack frequency is on the rise.
Netscout's research, made public on Tuesday, says that there has been an increase of 87% in exploit attempts between the second half of 2018 and 2019. In addition, DDoS attack frequency worldwide has increased by 16%, with 16 DDoS attempts taking place every minute.

When it comes to strength, the most powerful DDoS attack recorded by the company during H2 2019 was 622 Gbps.
Click to expand...

guest · Jun 13, 2020

AWS Hit With a Record 2.3 Tbps DDoS Attack
June 10, 2020
https://www.cbronline.com/news/record-ddos-attack-aws

AWS says it was hit with an record DDoS attack of 2.3 Tbps earlier this year year, with the (unsuccessful) attempt to knock cloud services offline continuing for three days in February.
That’s a colossal 2.3 trillion bytes of data every second being directed at AWS’s servers by an unknown attacker.

To put the scale of the attempt in context, it is nearly double the 1.3 Tbps attack that blasted GitHub offline in 2018, or the circa 1 Tbps Mirai botnet DDoS that famously knocked Dyn offline in 2016.
Click to expand...

AWS did not cite an apparent motive, but noted that attacks spike when a new vector is discovered by attackers.
Click to expand...

guest · Jun 16, 2020

Hosting Provider Hit With Largest-Ever DDoS Attack
June 16, 2020
https://www.darkreading.com/attacks...-with-largest-ever-ddos-attack/d/d-id/1338107

Attackers leveled the largest distributed denial-of-service attack to date against a specific website hosted by a large service provider in early June, topping a bandwidth of 1.44 terabits per second and 385 million packets-per-second.

Internet infrastructure firm Akamai, which revealed the attack today, said a second attack topped 500 megabits-per-second and targeted a different site at the same provider. While Akamai would not give more details about the targeted sites, the company said the attacker focused on the websites for a "social" reason, and Akamai does not believe that the hosting provider was the target, says Roger Barranco, vice president of global security operations for Akamai.

"What was really different is that the absolute kitchen sink was thrown in for this attack," Barranco says. More than nine different types of traffic were used in the attack [...]
Click to expand...

The variety of attack types, along with the coordination among the tools, was a novel approach, Barranco says.

"Really, you have to go all the way back to the Mirai days, to find a time when there was something that we hadn't seen before and we had to really engineer something unique to handle it," he says.
Click to expand...

hawki · Jun 18, 2020

"Amazon 'thwarts largest ever DDoS cyber-attack'

Amazon says its online cloud, which provides the infrastructure on which many websites rely, has fended off the largest DDoS attack in history...

Amazon Web Services (AWS) said the February attack had fired 2.3Tbps...

In a formal report about its DDoS protection service, AWS Shield, the company said the peak of the attack had been 44% larger than anything the service had seen before and resulted in a three-days of "elevated threat" status..."

https://www.bbc.com/news/technology-53093611

guest · Jun 25, 2020

European bank suffers biggest PPS DDoS attack, new botnet suspected
June 25, 2020
https://www.bleepingcomputer.com/ne...biggest-pps-ddos-attack-new-botnet-suspected/

A bank in Europe was the target of a huge distributed denial-of-service (DDoS) attack that sent to its networking gear a flood of 809 million packets per second (PPS).

The attack can easily be a contender for the largest DDoS incident to date, despite not being a bandwidth-intensive attack, with a footprint of just 418Gbps.
Fast and furious
The record DDoS attack was mitigated by Akamai on Sunday, June 21. The company did not disclose the name of the customer defended against the take down, referring to them as a large European bank.
The incident lasted for a short time and increased in intensity in just a couple of minutes. It took seconds to get from normal traffic levels to 418 Gbps.

About two minutes passed until the flood grew to its peak of 809 million packets per seconds. In all, the attack lasted less than 10 minutes, Akamai says in a blog post today.
Click to expand...

Largest PPS DDoS attack
Akamai believes that this is a new industry record in terms of PPS-focused attacks. Compared to previous largest attack recorded by the platform, which was 385 million PPS, this incident was more than double.

“This latest attack was clearly optimized to overwhelm DDoS mitigation systems via high PPS load,” Akamai says, adding that sent packets carried a payload of just 1 byte in a total packet size of 29 with IPv4 headers, thus hiding it among several billion peers.
Click to expand...

Akamai: Largest Ever Recorded Packet Per Second-Based DDoS Attack Mitigated by Akamai

This latest attack was clearly optimized to overwhelm DDoS mitigation systems via high PPS load. As you can see in the packet capture below, the packets sent carried a meager 1 byte payload (for a total packet size of 29 with IPv4 headers), making it appear like every other one of its several billion peers.

The June 21 attack was remarkable not only for its size, but also because of the speed at which it reached its peak.
Click to expand...

guest · Jun 26, 2020

Two record DDoSes disclosed this week underscore their growing menace
More bots + better DDoS traps = ever-growing amounts of junk traffic
June 25, 2020
https://arstechnica.com/information...ed-this-week-underscore-their-growing-menace/

Now there’s evidence that DDoSes, as they’re usually called, are growing more potent with two record-breaking attacks coming to light in the past week.

More advanced attackers magnify their firepower by bouncing the malicious traffic off of third-party services that in some cases can amplify it by a factor of 51,000, a feat that, at least theoretically, allows a single home computer with a 100 megabit-per-second upload capacity to deliver a once-unimaginable 5 terabits per second of traffic.
Click to expand...

Besides seizing on amplification methods, the growing size of DDoSes is the result of attackers taking control of an ever-growing number of devices
In Thursday’s report, Akamai said that 96 percent of the IP addresses used to deliver the record 809 million packets-per-second DDoS over the weekend had never been observed before. The growing number of compromised IoT devices is likely fueling that increase.

“The collateral damage footprint of DDoS attacks is often far larger than the impact on the intended targets,” Dobbins said. “Suffice it to say that far more uninvolved people and organizations often have their activities disrupted by the collateral damage of DDoS attacks than those who are the actual targets of these attacks.”
Click to expand...

guest · Jul 9, 2020

Huge DDoS Attack Launched Against Cloudflare in Late June
The 754 million packets-per-second peak was part of a four-day attack involving more than 316,000 sending addresses
July 9, 2020
https://www.darkreading.com/attacks...gainst-cloudflare-in-late-june/d/d-id/1338323

Cloudflare revealed this week that on June 21 it detected and mitigated a packet-based volumetric DDoS attack that peaked at 754 million packets-per-second. According to researchers, that peak was part of a four-day attack from June 18-21 that saw traffic from more than 316,000 different IP addresses directed at a single Cloudflare address.

In a blog post, Cloudflare researchers reported that the attack used a combination of three TCP attack vectors: SYN floods, ACK floods, and SYN-ACK floods.
The company says that these huge attacks persist despite a general decrease in the size and duration of DDoS attacks during the last year.
Click to expand...

Cloudflare: Mitigating a 754 Million PPS DDoS Attack Automatically

However in this DDoS campaign, the attack peaked at a mere 250 Gbps (I say, mere, but ¼ Tbps is enough to knock pretty much anything offline if it isn’t behind some DDoS mitigation service) so it does not seem as the attacker intended to saturate our Internet links, perhaps because they know that our global capacity exceeds 37 Tbps.

Instead, it appears the attacker attempted (and failed) to overwhelm our routers and data center appliances with high packet rates reaching 754 million packets per second.
Click to expand...

guest · Sep 8, 2020

Voxility Mitigates Multiple 1Tbps+ DDoS Attacks in the First Week of September
September 8, 2020
https://www.missioncriticalmagazine...s-ddos-attacks-in-the-first-week-of-september

Voxility mitigated multiple 1Tbps+ denial of service (DDoS) attacks on customer infrastructure early this month. Its fully integrated anti-DDoS solution was able to protect the network infrastructure from depreciation in service or being taken offline.

The attack waves peaked at 1,035 gigabits per second (Gbps) and 1,044 Gbps on Sept. 3-4, accompanied subsequently by lower intensity attacks of 798 Gbps and 854 Gbps over the weekend. These were made up of a volumetric User Datagram Protocal UDP flood, comprising abnormally large UDP packets, DNS amplification, and UDP packets without payload, in an attempt to overwhelm infrastructure ports with IP traffic.
Click to expand...

There were more than 600 different originating source IPs per DDoS event, with an average attack duration registered at around 15 minutes. The profile of the customer target was identified as a hosting provider with global operations.

“The motivations behind these waves of DDoS attacks are uncertain at this point,” said Maria Sirbu, vice president of corporate communications at Voxility. “
Click to expand...

Log in or Sign up

Akamai: DDoS attacks on the rise, become more specialized

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

hawki Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Akamai: DDoS attacks on the rise, become more specialized

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

hawki Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches