Recently, certain websites hosted by a large service provider were targeted by attackers in what is believed to be the largest DDoS (Distributed Denial of Service) attack ever.
- In the first attack, the hosting provider was hit with a 1.44 tbps DDoS attack.
- The second attack was conducted on another website hosted by the same provider with 500 mbps.
- Akamai stated that these particular websites were chosen because of social reasons and not much has been disclosed about the attacks.
Some technical details
- A variety of data types were used, indicating that the attackers did their homework diligently.
- Whereas a typical attack consists of only 2-3 traffic types, this one contained 9 different traffic types and the traffic surge lasted for an hour.
- The various devices used by the threat actors were sourced from different regions.
Some notable DDoS attacks
- While talking about the largest DDoS attacks, it would be a crime to not mention the 2018 1.3 tbps DDoS attack against GitHub. This was driven by the memcached reflection, sending packets at the rate of 126.9 million per second.
- In March this year, attackers attempted to disable the HHS website.
- A successful DDoS attack was carried on the Paris-based group of hospitals Assistance Publique-Hospitaux de Paris.
The bottom line is that with the global shift to work from home, life is utterly dependent on the Internet. People are working, shopping, and studying online, which has been reflected in the goals of threat actors and recent DDoS attacks. An organization can deal with these attacks by putting in place the requisite controls to block malicious traffic to prevent their services from getting overwhelmed.