Reset
red wave
/ Carol Hildebrand

Our New DDoS Normal Isn’t All That Normal

Attack frequency has dropped, but we are nowhere near the numbers considered normal prior to COVID-19: Threat actors launched approximately 5.4 million DDoS attacks in the first...

  • Attacks and DDoS Attacks
attacker
/ Roland Dobbins , Steinthor Bjarnason

DHCPDiscover Reflection/Amplification DDoS Attack Mitigation Recommendations

DHCPDiscover, a UDP-based JSON protocol used to manage DVRs, can be abused to launch UDP reflection/amplification attacks when an internet-exposed DVR lacks any form of...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
  • DDoS Tools and Services
cyber extortion
/ Roland Dobbins , Steinthor Bjarnason

Fancy Lazarus DDoS Extortion Campaign

ASERT Threat Summary Date/Time: 17June2021 1300UTC Severity: Warning Distribution: TLP: WHITE Categories: Availability Contributors: Jon Belanger, Richard Hummel. Executive Summary...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
Session Traversal Utilities for NAT (STUN) Reflection/Amplification
/ Roland Dobbins , Steinthor Bjarnason

Session Traversal Utilities for NAT (STUN) Reflection/Amplification

Adversaries weaponize STUN servers by incorporating the protocol into DDoS-for-Hire services. Approximately 75k abusable STUN servers give DDoS attackers ample opportunity to...

  • Arbor Networks - DDoS Experts
  • DDoS Tools and Services
  • Attacks and DDoS Attacks
Quarterly DDoS Update
/ Carol Hildebrand

The Beat Goes On

The beat goes on: Threat actors launched approximately 2.9 million DDoS attacks in the first quarter of 2021, a 31% increase from the same time in 2020.

  • Attacks and DDoS Attacks
connected globe
/ Roland Dobbins , Steinthor Bjarnason

TsuNAME Zone Cyclic Dependency-Induced Recursive DNS Query Cascade

In mid-May 2021, security researchers at SIDN Labs, InternetNZ, and USC/ISI released a research paper describing a sabotage-based DDoS attack methodology dubbed ‘TsuNAME’ that...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
crosshairs
/ Roland Dobbins , Steinthor Bjarnason

Datagram Transport Layer Security (D/TLS) Reflection/Amplification DDoS Attack Mitigation Recommendations

Datagram Transport Layer Security (D/TLS) is a variant of the TLS encryption protocol implemented atop User Datagram Protocol (UDP), it is utilized to secure datagram-based...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
internet highway
/ Roland Dobbins , Steinthor Bjarnason

Plex Media SSDP (PMSSDP) Reflection/Amplification DDoS Attack Mitigation Recommendations

Amplified PMSSDP DDoS attack traffic consists of SSDP HTTP/U responses sourced from ports UDP port 32414 and/or UDP port 32410 on abusable Plex Media Server instances and directed...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
  • DDoS Tools and Services
DDoS Campaign
/ Carol Hildebrand

Crossing the 10 Million Mark: DDoS Attacks in 2020

For the first time, we observed DDoS attacks rise above 10 million annually in 2020, nearly 1.6 million more attacks than seen in 2019.

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
  • ASERT
ddos banner
/ Roland Dobbins , Steinthor Bjarnason

Microsoft Remote Desktop Protocol (RDP) Reflection/Amplification DDoS Attack Mitigation Recommendations - January 2021

Recently observed DDoS attacks leverage abusable Microsoft RDP service to launch UDP Reflection/Amplification attacks with an 85.9:1 amplification factor.

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
  • DDoS Tools and Services
cyberextortion
/ Roland Dobbins , Steinthor Bjarnason

Lazarus Bear Armada DDoS Extortion Campaign — December 2020

DDoS Extortion Update: As previously reported, a relatively prolific threat actor initiated a global campaign of DDoS extortion attacks in mid-August 2020, largely directed towards...

  • Arbor Networks - DDoS Experts
  • Attacks and DDoS Attacks
hacker
/ Suweera De Souza

Dropping the Anchor

Trickbot has long been one of the key banking malware families in the wild. Despite recent disruption events, the operators continue to drive forward with the malware and have...

  • Malware