Saturday, July 13, 2024
EHA

Hackers Launched Record DDoS Attack with 25.3 Billion Requests in 4 Hours

On the day of June 27, 2022, Imperva, an internet cybersecurity company mitigated over 25.3 billion requests as part of a DDoS attack. A new record in the field of DDoS mitigation has been set by its solution.

A Chinese telecommunications company that has not been named was targeted in the attack. This furious attack reach a peak level of 3.9 million RPS, and it lasted for four hours on end.

To send multiple requests over individual connections simultaneously, attackers used HTTP/2 multiplexing, which is the ability to combine multiple packets into one package.

Massive Attack

There is no shortage of attacks that Cloudflare mitigated in June, and this attack set a record of 26 million RPS. However, Imperva’s attack lasted for an unusually long period of time, which stands in contrast to Cloudflare’s record-breaking attack in June.

The Imperva mitigation took place over 4 hours after an attack peaking at over one million RPS. Typically, attacks peaking at over one million RPS last for several seconds or minutes.

During the attack, the rate of RPS started at 3.1M, and remained about 3M until the attack was over. After reaching a peak of 3.9M RPS, the attack slowed down for several minutes before returning to full strength for an additional hour, at which time it peaked at 3.9M RPS.

A DDoS attack typically lasts no more than an hour in about one out of ten cases. 

Botnet

A massive botnet was in control of the DDoS attack and it was spread across 180 countries, with most IP addresses originating from the following countries:-

  • The U.S.
  • Brazil
  • Indonesia

The botnet consists of over 170,000 IP addresses distributed throughout the world, including the following:-

  • Routers
  • Security cameras
  • Compromised servers
  • Vulnerable IoTs

Cloud security service providers and public clouds are some of the places where the malicious traffic originates from and are hosting some of the malicious servers.

However, no name or identification was given for the botnet, but from what has been observed, it doesn’t appear to be “Mantis.” The Mantis relies primarily on powerful servers and virtual machines to run its operations, rather than a large number of devices.

Moreover, it is estimated that the number of devices that are used against Imperva’s client is closer to the counts of Mēris.

Download Free SWG – Secure Web Filtering – E-book

Website

Latest articles

mSpy Data Breach: Millions of Customers’ Data Exposed

mSpy, a widely used phone spyware application, has suffered a significant data breach, exposing...

Advance Auto Parts Cyber Attack: Over 2 Million Users Data Exposed

RALEIGH, NC—Advance Stores Company, Incorporated, a prominent commercial entity in the automotive industry, has...

Hackers Using ClickFix Social Engineering Tactics to Deploy Malware

Cybersecurity researchers at McAfee Labs have uncovered a sophisticated new method of malware delivery,...

Coyote Banking Trojan Attacking Windows Users To Steal Login Details

Hackers use Banking Trojans to steal sensitive financial information. These Trojans can also intercept...

Hackers Created 700+ Fake Domains to Sell Olympic Games Tickets

As the world eagerly anticipates the Olympic Games Paris 2024, a cybersecurity threat has...

Japanese Space Agency Spotted zero-day via Microsoft 365 Services

The Japan Aerospace Exploration Agency (JAXA) has revealed details of a cybersecurity incident that...

Top 10 Active Directory Management Tools – 2024

Active Directory Management Tools are essential for IT administrators to manage and secure Active...
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles