{"id":79497,"date":"2024-01-16T15:30:19","date_gmt":"2024-01-16T11:30:19","guid":{"rendered":"https:\/\/techxmedia.com\/?p=79497"},"modified":"2024-01-16T15:39:19","modified_gmt":"2024-01-16T11:39:19","slug":"cloudflare-report-on-ddos-attack-trends","status":"publish","type":"post","link":"https:\/\/techxmedia.com\/en\/cloudflare-report-on-ddos-attack-trends\/","title":{"rendered":"Cloudflare Report on DDoS Attack Trends"},"content":{"rendered":"\n<p><\/p>\n\n\n\n<p><strong>Cloudflare, Inc<\/strong>. has released its sixteenth edition of the 2023 Q4 DDoS <a href=\"https:\/\/blog.cloudflare.com\/ddos-threat-report-2023-q4\/\" title=\"\">report<\/a>, highlighting key insights into the DDoS threat landscape observed across its global network\u2014one of the world&#8217;s largest.<\/p>\n\n\n\n<p><strong>Key Findings:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>In Q4, Cloudflare recorded a 117% year-over-year increase in network-layer DDoS attacks. DDoS activity also rose overall, specifically targeting retail, shipment, and public relations websites during Black Friday and the holiday season.<\/li>\n\n\n\n<li>DDoS attack traffic targeting Taiwan experienced a significant 3,370% growth compared to the previous year, linked to the upcoming general election and reported tensions with China. Additionally, DDoS attacks targeting Israeli and Palestinian websites increased, with a 27% quarter-over-quarter rise for Israel and a substantial 1,126% quarter-over-quarter increase for Palestine amid the ongoing conflict.<\/li>\n\n\n\n<li>There was an astonishing 61,839% surge in DDoS attack traffic targeting Environmental Services websites in Q4, coinciding with the 28th United Nations Climate Change Conference (COP 28).<\/li>\n<\/ol>\n\n\n\n<p><strong>Hyper-volumetric HTTP DDoS Attacks:<\/strong><\/p>\n\n\n\n<p>In 2023, the Internet faced unprecedented challenges with DDoS attacks reaching new heights in size and sophistication. Cloudflare encountered a campaign of hyper-volumetric DDoS attacks at rates never seen before. These attacks, exploiting an HTTP\/2 vulnerability, culminated in the mitigation of the largest attack ever seen in Q3\u2014201 million requests per second, almost 8 times larger than the 2022 record.<\/p>\n\n\n\n<p><strong>Growth in Network-layer DDoS Attacks:<\/strong><\/p>\n\n\n\n<p>Following the hyper-volumetric campaign, Cloudflare observed a 20% decrease in HTTP DDoS attacks compared to 2022. However, there was an 85% increase in network-layer DDoS attacks, with Cloudflare&#8217;s automated defenses mitigating 8.7 million such attacks in 2023.<\/p>\n\n\n\n<p><strong>DDoS Attacks During COP 28:<\/strong><\/p>\n\n\n\n<p>In the final quarter of 2023, there was a significant shift in cyber threats. The Environmental Services industry witnessed a staggering 618-fold increase in HTTP DDoS attacks during COP 28, highlighting an alarming trend at the intersection of environmental issues and cybersecurity.<\/p>\n\n\n\n<p><strong>DDoS Attacks and Iron Swords:<\/strong><\/p>\n\n\n\n<p>DDoS attacks played a role in the Ukraine-Russia war and the Israel-Hamas conflict. Operation &#8220;<a href=\"https:\/\/en.wikipedia.org\/wiki\/2023_Israel%E2%80%93Hamas_war\" title=\"\">Iron Swords<\/a>&#8221; in the Israel-Hamas war saw DDoS attacks targeting both sides. Palestinian Banking websites were the primary target (90%), while Israeli Newspaper &amp; Media sites received almost 40% of all Israel-bound HTTP DDoS attacks.<\/p>\n\n\n\n<p><strong>HTTP DDoS Attacks:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Top Origins: The US replaced China as the largest source of HTTP DDoS attack traffic since Q4 2022. China and the US together account for over a quarter of all global HTTP DDoS attack traffic.<\/li>\n\n\n\n<li>Most Attacked Industries: Cryptocurrency was the most attacked industry by volume, followed by Gaming &amp; Gambling.<\/li>\n\n\n\n<li>Most Attacked Countries: Singapore, the US, and Canada were the top three targets of HTTP DDoS attacks in Q4, with Taiwan ranking fourth.<\/li>\n<\/ul>\n\n\n\n<p><strong>Network Layer DDoS Attacks:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Target Countries: China was the most attacked country, constituting 45% of all network-layer DDoS traffic mitigated by Cloudflare globally.<\/li>\n\n\n\n<li>Most Attacked Industries: Public Relations and Communications, with 36% of its traffic being malicious.<\/li>\n<\/ul>\n\n\n\n<p><strong>Attack Vectors and Attributes:<\/strong><\/p>\n\n\n\n<p>The majority of DDoS attacks are short and small, but even these can disrupt unprotected websites. Mirai-variant botnets remain common, with 3% of attacks originating from Mirai. DNS-based attacks, including DNS Floods and DNS Amplification, account for almost 53% of all attacks in Q4. <a href=\"https:\/\/www.cloudflare.com\/learning\/ddos\/syn-flood-ddos-attack\/\">SYN Flood<\/a>\u00a0follows in second and\u00a0<a href=\"https:\/\/www.cloudflare.com\/learning\/ddos\/udp-flood-ddos-attack\/\">UDP floods<\/a>\u00a0in third.<\/p>\n\n\n\n<p><strong>Bashar Bashaireh, Managing Director &amp; Head of Sales &#8211; Middle East and T\u00fcrkiye at Cloudflare<\/strong>, emphasized the company&#8217;s commitment to a secure, performant, and available internet for all, highlighting their unmetered DDoS protection since 2017.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cloudflare, Inc. has released its sixteenth edition of the 2023 [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":79500,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[9619],"tags":[5950,5964,314,417],"contributor":[9732],"class_list":["post-79497","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-top-stories","tag-2020-duo-trusted-access-report","tag-cloudflare","tag-cybersecurity-2","tag-ddos","contributor-news-desk"],"featured_image_src":"https:\/\/techxmedia.com\/en\/wp-content\/uploads\/2024\/01\/Untitled-design-2024-01-16T161535.190.png","author_info":{"display_name":"Rabab","author_link":"https:\/\/techxmedia.com\/en\/author\/rabab\/"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts\/79497","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/comments?post=79497"}],"version-history":[{"count":0,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/posts\/79497\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/media\/79500"}],"wp:attachment":[{"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/media?parent=79497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/categories?post=79497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/tags?post=79497"},{"taxonomy":"contributor","embeddable":true,"href":"https:\/\/techxmedia.com\/en\/wp-json\/wp\/v2\/contributor?post=79497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}