Cloudflare , a leading provider of Internet infrastructure and cybersecurity services, announced that it has thwarted the largest recorded volumetric denial-of-service (DDoS) attack to date. The attack peaked at 11.5 terabits per second (Tbps) , breaking all previous records.
According to the company, cybercriminals unleashed a massive amount of data with the aim of overloading the target's infrastructure. In such attacks, known as volumetric DDoS, attackers consume the available bandwidth or computing resources of a system, making the target inaccessible to legitimate users.
Cloudflare itself admitted that its “defenses were working overtime” as it faced hundreds of attacks in recent weeks. The peak attack reached 11.5 Tbps and 5.1 billion packets per second (Bpps), demonstrating the scale of the threat.
See also: Researchers warn about MystRodX Backdoor
Correction and controversy surrounding the origin of the attack
Initially, Cloudflare said the 11.5 Tbps attack was primarily sourced from Google Cloud. However, a few hours later, the company clarified that the malicious traffic came from a combination of IoT and cloud service providers.
For its part, Google denied any direct involvement, with a spokesperson stating that the initial reports were incorrect and that the company followed all defense and customer notification protocols. The incident highlights a broader challenge: the reliance of DDoS attacks on vulnerable IoT devices and public cloud infrastructure, which often act as “recruited bots.”
An Escalating Phenomenon – Record after Record
The new incident comes just two months after Cloudflare announced it had thwarted another record-breaking attack, this time at 7.3 Tbps. The previous high was set in October 2024, when the company blocked a 3.8 Tbps attack.
It's not just Cloudflare that's been targeted. In January 2022, Microsoft also thwarted a 3.47 Tbps against an Azure customer, while in July 2024, a new massive DDoS campaign caused severe disruptions to Microsoft 365 and Azure.
See also: New WhatsApp scam gains access to your conversations
The constant increase in the frequency and power of these attacks shows that cybercriminals are investing in more sophisticated tools and methods, taking advantage of the breadth of modern connectivity.
Statistics that worry
In its latest DDoS Report for Q1 2025, Cloudflare recorded an explosive increase in attacks:
- 198% increase on a quarterly basis
- 358% increase year-on-year
In total, the company thwarted 21.3 million DDoS attacks, with 16.8 million being network-level attacks. Of these, 6.6 million directly targeted Cloudflare's own infrastructure, in an 18-day, multi-pronged campaign that included SYN floods, Mirai botnet attacks , and SSDP amplification techniques.
The most worrying trend is the launch of network-level attacks, which have increased by 509%. This shows that attackers are not limited to small-scale attacks, but have the ability to "hit" critical infrastructure at devastating speeds.
What does this mean for the future of Internet security?
The rise in DDoS attacks raises critical questions about the resilience of the Internet. With the spread of IoT (smart devices, cameras, routers, sensors), attackers have at their disposal millions of vulnerable devices that can be turned into botnet "soldiers".
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Furthermore, businesses’ reliance on cloud services means that even a brief outage can result in huge financial losses. DDoS attacks are no longer simply a “show of force” by hackers, but are often linked to blackmail, geopolitical tensions and targeted campaigns of destruction.
See also: Lazarus hackers deploy three RATs on compromised systems
Cloudflare, Microsoft, and other providers continue to invest in automated detection systems, AI-based filters, and geo-distributed data centers to mitigate the impact of such attacks. However, the scale of the latest attack (11.5 Tbps) shows that the battle is ongoing and is evolving into a true “infrastructure war.”
The recent incident isn't just news for tech enthusiasts; it's a warning. The internet as we know it is built on a fragile web of infrastructure that can take unprecedented hits. While companies like Cloudflare seem capable of holding up, the question is: for how long?
As attacks become more powerful and more frequent, the need for global cooperation, tighter IoT device security , and continued investment in defense becomes more imperative than ever.
Source: www.bleepingcomputer.com
