Rampant growth of DDoS attacks in 2016
In this article (4)
The threat of IoT botnets was realized in 2016 and popularized by Mirai, according to a study by Neustar.
Mirai and similar types of malware compromise IoT device credentials to enrol them into botnets, which are activated by command and control servers.
As these code assemblies are published, new developments continue to emerge, such as persistent device enrolment, which enables botnet operators to maintain control of a device even after it is rebooted.
The study also reported that the frequency of DDoS attack mitigations by the company increased 40% in 2016 compared to the same period of time in 2015, according to a study released by the company.
“With DDoS attacks predicted to become even more complex and ferocious in 2017, increasingly digital organizations within Asia-Pacific will be exposed to more frequent and severe cyber-attacks,” said Robin Schmitt, general manager for APAC at Neustar.
Multi-vector attacks, which combine attack vectors to confuse defenders and supplement attack volume, also increased 322% and accounted for 52% of the attacks mitigated by Neustar. UDP, TCP and ICMP comprise the three most popular attack vectors, which were leveraged in more than 50% of attacks.
The report also showed that DNS-based attacks increased 648% with many attackers leveraging DNSSEC amplification to generate massive volumetric pressure.
Questions & Answers
Q.What specifically caused the significant increase in DDoS attacks during 2016?
What specifically caused the significant increase in DDoS attacks during 2016?
The threat from IoT botnets, particularly Mirai and similar malware, became a reality in 2016. These compromised IoT device credentials to enrol them into botnets, which were then used for attacks.
Q.What new developments emerged in botnet technology mentioned in the study?
What new developments emerged in botnet technology mentioned in the study?
New developments included persistent device enrolment, which allows botnet operators to retain control of a device even if it is rebooted. This makes the botnets more resilient.
Q.Which specific types of DDoS attacks saw the largest increases in 2016?
Which specific types of DDoS attacks saw the largest increases in 2016?
DNS-based attacks increased by 648%, often using DNSSEC amplification. Multi-vector attacks, which combine various methods, also rose significantly by 322% and formed over half of mitigated attacks.
Reader pulse
Are you prepared for sophisticated DDoS attacks?
19,259 votes so far