29.7 Tbps DDoS Attack by Aisuru Botnet Becomes the Largest Ever Recorded

A new and dangerous botnet named “Aisuru” has shattered world records by launching a Distributed Denial of Service (DDoS) attack that peaked at an unprecedented 29.7 terabits per second (Tbps).

According to Cloudflare’s newly released Q3 2025 DDoS Threat Report, this attack is the largest ever recorded.

The Aisuru botnet is a massive network of infected devices, estimated to include between 1 million and 4 million hosts worldwide.

In the third quarter of 2025 alone, this botnet unleashed a wave of hyper-volumetric attacks, routinely exceeding 1 Tbps.

Cloudflare reported that these massive attacks surged by 54% from the previous quarter, averaging 14 per day.

The danger of Aisuru goes beyond just its size. The botnet has targeted major industries, including financial services, gaming, and telecommunications.

The sheer volume of traffic generated by Aisuru was so intense that it caused “widespread collateral Internet disruption” across the United States, affecting Internet Service Providers (ISPs) that were not even the primary targets.

Security experts warn that parts of this botnet are being sold as “botnets-for-hire,” allowing bad actors to rent this destructive power for as little as a few hundred dollars.

Global Attack Trends Rising

Beyond Aisuru, the third quarter of 2025 saw a general rise in cyber aggression. Cloudflare’s autonomous systems blocked 8.3 million DDoS attacks during this period, a 40% increase from the same period last year.

The report highlights a shift in targets based on current events. As public debate and regulations around Artificial Intelligence (AI) heated up in September 2025, attacks against AI companies skyrocketed by 347%.

Additionally, trade tensions between the European Union and China over rare earth minerals led to a spike in attacks against the Mining, Minerals & Metals industry and the Automotive sector.

Cloudflare report also found a direct link between real-world protests and cyberattacks. In the Maldives, protests against government policies were accompanied by a massive surge in DDoS attacks, pushing the country up 125 spots to become the 38th most attacked country globally.

Similarly, nationwide protests in France against austerity measures coincided with a wave of attacks that pushed France up to the 18th spot on the list of top targets.

The data clearly shows that cyber threats are becoming faster, larger, and more sophisticated. Indonesia remains the top source of attack traffic, a position it has held for a full year.

With attacks often lasting less than ten minutes, human reaction time is no longer enough.

Cloudflare emphasizes that legacy security solutions are failing to keep up, urging organizations to adopt automated, always-on defenses to protect against these record-breaking threats.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.