Cloudflare has been reported that it has mitigated over 100 hyper-volumetric L3/4 DDoS attacks, with many exceeding 2 billion Pps and 3 Tbps. The largest DDoS attack peaked at 3.8 Tbps, which is the highest ever publicly disclosed.
Cloudflare pointed out that it has detected and mitigated the attack with its automated processes.
The attack campaign that started as early as September targets the financial, internet, and telecom industries. The DDoS attacks predominantly use UDP traffic originated from compromised devices globally, with major sources in Vietnam, Russia, Brazil, Spain, and the US.
As per the researchers, these attacks is generated from compromised MikroTik devices, DVRs, and web servers, while high bitrate attacks are linked to compromised ASUS routers, likely exploited via a critical, improper authentication flaw (CVE-2024-3080) in ASUS routers.
The previous record-breaking volumetric DDoS attack was reported by Microsoft in late 2021, peaking at 3.47 Tbps with a packet rate of 340 million Pps. The largest attack previously seen by Cloudflare peaked at 2.6 Tbps.
The scale and frequency of recent DDoS attacks are unprecedented, with experts warning they could overwhelm unprotected internet infrastructure.
Ddos attacks are very dangerous 🌑