DDoS and bot attacks in 2022: Business sectors at risk and how to defend

According to Gcore, in 2022, the number and volume of DDoS attacks will roughly double compared to 2021. The average attack power will grow from 150-300 Gbps to 500-700 Gbps. Andrew Slastenov, Head of Web Security, at Gcore talks to his colleagues about trends in the cybersecurity market: [...]

---

Imperva mitigated long-lasting, 25.3 billion request DDoS attack

Internet security company Imperva has announced its DDoS (distributed denial of service) mitigation solution has broken a new record, defending against a single attack that sent over 25.3 billion requests to one of its customers. [...]

---

DDoS Attack Against Eastern Europe Target Sets New Record

The target has been under relentless DDoS attack, which ultimately set a new packets-per-second record for Europe.

---

Another record-breaking DDoS attack has been stopped

Akamai says it stopped another record-breaking DDoS attack, this time against an Eastern European company.

---

Akamai stopped new record-breaking DDoS attack in Europe

A new distributed denial-of-service (DDoS) attack that took place on Monday, September 12, has broken the previous record that Akamai recorded recently in July. [...]

---

DDoS attacks on financial firms increase during Ukraine war

DDoS attacks made up 25 percent of the cyber incidents submitted to the UK's Financial Conduct Authority in the first half of 2022, compared to just four percent in 2021. Analysis by attack simulation specialist Picus Security of information obtained from the FCA under a freedom of information request shows the rise also coincides with a reported increase in DDoS for hire websites and ransomware operators using DDoS as a tactic to pressure and extort money from targets. Picus believes the primary reason for the significant increase in DDoS attacks is UK finance firms being targeted by nation-state attackers and… [Continue Reading]

---

DDoS Attacks on UK Firms Surge During Ukraine War

Overall incidents fell in H1 2022, according to FOI data

---

Six-year-old blind SSRF vulnerability in WordPress Core feature could enable DDoS attacks

Issue present in pingback requests feature

---

LockBit, ALPHV, and Other Ransomware Gang Leak Sites Hit by DDoS Attacks

A sweeping effort to prevent a raft of targeted cybercrime groups from posting ransomware victims' data publicly is hampering their operations, causing outages.

---

Ransomware gang's Cobalt Strike servers DDoSed with anti-Russia messages

Someone is flooding Cobalt Strike servers operated by former members of the Conti ransomware gang with anti-Russian messages to disrupt their activity. [...]

---

Top ransomware group hit with DDoS attack, complains about injustice

Hackers are getting a taste of their own medicine with a DDoS attack.

---

WordPress sites hacked with malware-laden fake Cloudflare DDoS alerts

Hackers are preying on people that don't understand how DDoS protection works.

---

Fake DDoS Protection Alerts Distribute Dangerous RAT

Security vendor Sucuri says adversaries are injecting malicious JavaScript into numerous WordPress websites that triggers phony bot-related checks.

---

CISA is warning of high-severity PAN-OS DDoS flaw used in attacks

A recent vulnerability found in Palo Alto Networks' PAN-OS has been added to the catalog of Known Exploitable Vulnerabilities from the U.S. Cybersecurity and Infrastructure Security Agency (CISA). [...]

---

LockBit ransomware blames Entrust for DDoS attacks on leak sites

The LockBit ransomware operation's data leak sites have been shut down over the weekend due to a DDoS attack telling them to remove Entrust's allegedly stolen data. [...]

---

Threat Actor Deploys Raven Storm Tool to Perform DDoS Attacks

The malware is reportedly capable of server takedown, Wi-Fi attacks and application layer attacks

---

DDoS Protection Weaponized to Deliver RATs

New campaign disguised as fake Cloudflare pop-up

---

WordPress sites hacked with fake Cloudflare DDoS alerts pushing malware

WordPress sites are being hacked to display fake Cloudflare DDoS protection pages to distribute malware that installs the NetSupport RAT and the RaccoonStealer password-stealing Trojan. [...]

---

Google says it has blocked another huge DDoS attack

At 46 million rps, the attack was 76% larger than the previous record holder.

---

Google: Here's how we blocked the largest web DDoS attack ever

Google Cloud says protected one customer from a Mēris botnet attack that peaked at 46 million requests per second.

---