Collaborate Disseminate
WAF Attacks have been increasing dramatically over the last 9 months. These attacks cut across industries, geos and customers. Growth has largely been driven by Local File Inclusion (lfi) attacks, which took the lead from SQL Injection attacks in early… Continue reading An Attack Surface Workout for Web Application and API Attacks
DDoS and AppSec attacks impacting the ANZ region (Australia and New Zealand) have been in the headlines of late, with several high profile companies seeing prolonged outages and leading to speculation as to whether the region is being specifically targ… Continue reading Attack Campaigns Ramp Up for Organizations Down Under
New to the scene, monster-sized botnet M?ris is raising some eyebrows with giant requests per second (rps) attacks as shared by Cloudflare (17.2M rps, reported August 19), Yandex (peaking at 21.8M rps on September 5), and KrebsOnSecurity (2M rps on Sep… Continue reading DDoS Chart Toppers?BPS, PPS and RPS Greatest Hits
DDoS attacks are relatively easy to launch from a number of online booter services, and the availability of cryptocurrencies for payment has made it easy to remain anonymous. Attackers can try their hand at DDoS for little effort and money, and in relative safety. They give it a go, try a few things (vector, endpoint, and scale changes), and for those with effective defenses, the attacker eventually burns out. Continue reading Dogged Persistence — The Name of the Game for One DDoS Attacker
With DDoS, we typically observe a moderate degree of attacker persistence. DDoS attacks are relatively easy to launch from a number of online booter services, and the availability of cryptocurrencies for payment has made it easy to remain anonymous. At… Continue reading Dogged Persistence?The Name of the Game for One DDoS Attacker
Just when we thought DDoS extortion was fading into the rearview mirror, it’s time to circle up the trucks again (gas tanks full). Starting last week and rapidly accelerating, we began seeing in our data and hearing firsthand from organizations about a new wave of extortion activity — new Bitcoin demands; new threat actor names; and new attacker tactics, techniques, and procedures (TTPs). Continue reading The Rapid Resurgence of DDoS Extortion (That Didn’t Take Long)
Just when we thought DDoS extortion was fading into the rearview mirror, it’s time to circle up the trucks again (gas tanks full). Starting last week and rapidly accelerating, we began seeing in our data and hearing firsthand from organizations about a… Continue reading The Rapid Resurgence of DDoS Extortion (That Didn’t Take Long)
Just when we thought DDoS extortion was fading into the rearview mirror, it’s time to circle up the trucks again (gas tanks full). Continue reading The Rapid Resurgence of DDoS Extortion (That Didn’t Take Long)
In our 2020 DDoS retrospective, we highlighted the twists and turns of a very, very active threat landscape. As a quick refresher, we mitigated some of the largest attacks ever seen (1.44 Tbps and 809 Mpps); saw more attacks on customers across more diverse industries than ever before; and observed the largest DDoS extortion campaign, which impacted thousands of companies globally. So, it came as no surprise when 2021 threat actors continued to double down on DDoS. Continue reading 2021: Volumetric DDoS Attacks Rising Fast
In our 2020 DDoS retrospective, we highlighted the twists and turns of a very, very active threat landscape. As a quick refresher, we mitigated some of the largest attacks ever seen (1.44 Tbps and 809 Mpps); saw more attacks on customers across more di… Continue reading 2021: Volumetric DDoS Attacks Rising Fast