Flag of Chile

Chile

Key Metrics from the 2H 2020 NETSCOUT Threat Intelligence Report

As the COVID-19 pandemic triggered a massive shift in internet usage, cybercriminals quickly pounced, launching more than 10 million DDoS attacks aimed at crippling the very online services essential to remote work and online life. Vital pandemic industries such as ecommerce, streaming services, online learning, and healthcare all experienced increased attention from malicious actors, including those behind the Lazarus Bear Armada campaign of DDoS extortion attacks that hit thousands of companies worldwide. As the COVID-19 pandemic extends into 2021, we can logically expect to see threat actors targeting vulnerabilities exposed by the global crisis as well as discovering and using new attack vectors that poke at the weak spots of our new normal.

Impact Analysis

This was a record-breaking year for DDoS attacks—and that has to have an impact on global infrastructure, since DDoS attackers don’t pay for transit costs. Instead, that cost is generally passed down to everyone who uses the internet. So we continued to dig into the details of how much traffic on the global internet is due solely to DDoS attacks by calculating the DDoS Attack Coefficient (DAC). This measurement illustrates the continual presence of DDoS traffic across all regions. In essence, it shows the “DDoS tax” that we all end up paying.

Bandwidth Impact Percentage Change

July 96.5 Gbps, August 105.9 Gbps, September 86.6 Gbps, October 132.0 Gbps, November 508.1 Gbps, December 92.1 Gbps

Throughput Impact Percentage Change

July 33.5 Mpps, August 28.9 Mpps, September 37.2 Mpps, October 21.5 Mpps, November 126.4 Mpps, December 23.9 Mpps

Top Ten Vertical Industries Under Attack

The following industry chart shows the most targeted sectors in 2020 by number of attacks.

Rank Vertical Frequency Max Attack Max Impact Average Duration
1
cell phone icon Wireless Telecommunications Carriers
2,910 93.6 Gbps 18.1 Mpps 24.4 Minutes
2
Sales Tag with Telephone icon Telecommunications Resellers
305 4.4 Gbps 0.4 Mpps 35.1 Minutes
3
laptop icon Electronic Computer Manufacturing
303 16.1 Gbps 2.5 Mpps 18.7 Minutes
4
Telecomm Tower icon Other Telecommunications
265 1.2 Gbps 0.1 Mpps 30.3 Minutes
5
cloud icon with up arrow Data Processing, Hosting + Related Services
208 7.4 Gbps 0.7 Mpps 34.8 Minutes
6
radio icon Internet Publishing, Broadcasting + Web Search Portals
185 1.9 Gbps 0.2 Mpps 30.8 Minutes
7
Wired Telecommunications Resellers icon Wired Telecommunications Carriers
129 2.8 Gbps 1.3 Mpps 39.8 Minutes
8
Hands in Prayer Religious Org icon Religious Organizations
34 1.6 Gbps 0.2 Mpps 29.6 Minutes
9
Document with PDF icon Software Publishers
15 0.9 Gbps 0.1 Mpps 22.2 Minutes
10
monitor with play button icon Cable + Other Subscription Programming
12 0.2 Gbps 0.03 Mpps 10.7 Minutes

IoT

Top Five Username + Password Combinations

root/xc3511 - 323; guest/12345 - 319; admin/admin - 251; root/vizxv - 216; root/root - 156

Top Exploits

Exploit Name EDB-ID
/ctrlt/DeviceUpgrade_1 Huawei Router 45991
/setup.cgi Netgear Remote Code Execution 43055
/GponForm/diag_Form Dasan GPON home routers -----
Download PDF Download PDF