High-Severity SLP Flaw Can Amplify DDoS Attacks up to 2,200 Times

More than 2,000 global organizations — including Fortune 1,000 companies — are at risk to reflective DDoS attacks that exploit a vulnerability discovered in the legacy Internet protocol.

---

Mirai malware targeting top TP-Link routers to hijack into DDoS attacks

TP-Link routers in Eastern Europe were the first to be targeted with a high-severity flaw.

---

New SLP Vulnerability Could Enable Massive DDoS Attacks

Bug has potential to facilitate 2200x amplification attacks

---

DDoS, Not Ransomware, Is Top Business Concern for Edge Networks

A study found that ransomware threats are viewed as having the lowest overall perceived likelihood of attack on the edge.

---

New SLP bug can lead to massive 2,200x DDoS amplification attacks

A new reflective Denial-of-Service (DoS) amplification vulnerability in the Service Location Protocol (SLP) allows threat actors to launch massive denial-of-service attacks with 2,200X amplification. [...]

---

DDoS attacks shifting to VPS infrastructure for increased power

Hyper-volumetric DDoS (distributed denial of service) attacks in the first quarter of 2023 have shifted from relying on compromised IoT devices to leveraging breached Virtual Private Servers (VPS). [...]

---

HTTP/S DDoS Attacks Soar 487% in Three Years

Website takedowns driven by Russian hacktivists

---

German Police Raid DDoS-Friendly Host ‘FlyHosting’

Authorities in Germany this week seized Internet servers that powered FlyHosting, a dark web service that catered to cybercriminals operating DDoS-for-hire services. Fly Hosting first advertised on cybercrime forums in November 2022, saying it was a Germany-based hosting firm that was open for business to anyone looking for a reliable place to host malware, botnet controllers, or DDoS-for-hire infrastructure.

---

UK Sets Up Fake Booter Sites To Muddy DDoS Market

The United Kingdom's National Crime Agency (NCA) has been busy setting up phony DDoS-for-hire websites that seek to collect information on users, remind them that launching DDoS attacks is illegal, and generally increase the level of paranoia for people looking to hire such services. 

---

NCA Harvests Info on DDoS-For-Hire With Fake Booter Sites

Agency attempts to disrupt the cybercrime underground

---

UK creates fake DDoS-for-hire sites to identify cybercriminals

The U.K.'s National Crime Agency (NCA) revealed today that they created multiple fake DDoS-for-hire service websites to identify cybercriminals who utilize these platforms to attack organizations. [...]

---

Mirai Hackers Use Golang to Create a Bigger, Badder DDoS Botnet

With HinataBot, malware authors have created a beast many times more efficient than even the scariest botnets of old, packing more than 3Tbit/s DDoS speeds.

---

KillNet Group Uses DDoS Attacks Against Azure-Based Healthcare Apps

Microsoft said it saw between 40 and 60 daily attacks in February

---

This new botnet could launch a devastating DDoS attack at any time

Researchers spot an actively developed botnet capable of 3.3 Tbps attacks.

---

"Hinata" Botnet Could Launch Massive DDoS Attacks

Akamai warns of new Mirai-like botnet written in Go

---

New ‘HinataBot’ botnet could launch massive 3.3 Tbps DDoS attacks

A new malware botnet was discovered targeting Realtek SDK, Huawei routers, and Hadoop YARN servers to recruit devices into DDoS (distributed denial of service) swarm with the potential for massive attacks. [...]

---

Microsoft Azure Warns on Killnet's Growing DDoS Onslaught Against Healthcare

DDoS cyberattack campaigns from the pro-Russian group have spiked significantly.

---

Akamai mitigates record-breaking 900Gbps DDoS attack in Asia

Akamai reports having mitigated the largest DDoS (distributed denial of service) attack ever launched against a customer based in the Asia-Pacific region. [...]

---

Protecting collocated servers from DDoS attacks using GRE tunnels

You can get DDoS protection remotely for your collocated server using a generic routing encapsulation (GRE) tunnel. We will explain how GRE tunnels combined with Gcore scrubbing centers can help keep your data safe. [...]

---

Many DDoS attacks might not be all they seem

What's hiding behind a DDoS attack? It could be a data exfiltration operation.

---