Cloudflare, Inc., the security, performance, and reliability company helping to build a better Internet, has announced its 2022 Q3 DDoS report. This report includes insights and trends about the DDoS threat landscape — as observed across the global Cloudflare network.
DDoS assaults with a multi-terabit impact are happening more frequently. Multiple assaults that exceeded 1 Tbps were automatically detected and mitigated by Cloudflare in Q3. The biggest attack was a 2.5 Tbps DDoS assault directed against Wynncraft, a Minecraft server, by a Mirai botnet variant.
This is the biggest assault Cloudflare has ever seen from the bitrate perspective. It became a multi-vector assault which include UDP and TCP floods. However, Wynncraft, a vastly multiplayer online role-playing recreation Minecraft server wherein masses and lots of customers can play on the identical server didn’t even observe the assault, the reason that Cloudflare filtered it out for them.
Cyberattacks are an expression of geopolitical unrest. Attacks on Taiwanese businesses increased by over 20 times in Cloudflare’s data centres, and the company observed a 24x rise in attacks on Russian websites compared to last year when it examined the conflict in Ukraine.
Commenting on the report, Bashar Bashaireh, Managing Director, Middle East & Turkey, Cloudflare said “Attacks may be initiated by humans, but they are executed by bots — and to play to win, you must fight bots with bots. Detection and mitigation must be automated as much as possible because relying solely on humans puts defenders at a disadvantage.”
He added “Cloudflare’s automated systems constantly detect and mitigate DDoS attacks for our customers, so they don’t have to. Over the years, it has become easier, cheaper, and more accessible for attackers and attackers-for-hire to launch DDoS attacks. But as easy as it has become for the attackers, we want to make sure that it is even easier – and free – for defenders of organisations of all sizes to protect themselves against DDoS attacks of all types. We’ve been providing unmetered and unlimited DDoS protection for free to all of our customers since 2017 — when we pioneered the concept.”
