Powerful DDoS attack targets DDoS scrubbing provider

FastNetMon ofDDoS detection solutions, announced this week that it detected and helped respond to a massive distributed denial-of-service (DDoS) attack.

The attack targeted a large DDoS scrubbing provider located in Western Europe, reaching packet forwarding rates of 1.5 billion packets per second (1.5 Gpps). This incident is one of the most intense packet-rate floods ever publicly disclosed. The attack was primarily a UDP flood, a typical method used by malicious actors to overwhelm a target’s resources.

See also: RapperBot: Takes over devices and carries out DDoS attacks

The malicious traffic originated from a massive, globally distributed botnet. This network consisted of compromised devices (everyday electronics, such as IoT devices and routers), spread across more than 11,000 unique networks around the world. Using a large number of devices, the attackers were able to generate an overwhelming volume of traffic directed at a single target. Most ironically, they targeted a company that specializes in defending against such incidents.

This massive packet flood comes just days after Cloudflare dealing with a separate, massive 11.5 Tbps DDoS attack. While that attack focused on bandwidth volume (bits per second), the FastNetMon incident highlights a different but equally dangerous factor: packet volume (packets per second). High packet rates per second are designed to strain the hardware and software resources of network equipment (e.g. routers and firewalls), which can only process a finite number of packets at any given time, regardless of their bandwidth.

See also: Jaguar Land Rover: Cyberattack led to data theft

“This event is part of a dangerous trend,” said Pavel Odintsov, Founder of FastNetMon. He warned of the growing threat landscape where tens of thousands of unsecured consumer devices can be transformed into powerful, coordinated attack tools. FastNetMon’s system, which uses highly optimized C++ algorithms for real-time network traffic analysis, automatically detected the strange activity within seconds of its launch. This immediate alert allowed the provider to activate response protocols, successfully preventing any major disruption to its services and protecting its infrastructure from overload.

The incident highlights the importance of rapid, automated detection in an era of increasingly sophisticated DDoS threats.

DDoS attacks

DDoS is a form of cyberattack that aims to disrupt the services of a system or website, making it inaccessible to users. In essence, this attack causes an overload of system resources, making it unable to respond to user requests.

See also: New phishing attack mimics Google AppSheet

DDoS attacks have become one of the most insidious weapons of cybercrime. They do not aim to steal data but to paralyze critical services, causing financial losses and reputational damage to victims. With the spread of IoT devices, attackers easily acquire huge “armies” of compromised endpoints that turn into botnets. This makes attacks more powerful, cheaper and more difficult to prevent. At the same time, tactics are diversifying: from bandwidth attacks to targeted packet floods that exhaust systems. In a world where cloud services and online platforms are vital, investing in automated detection and resilient infrastructure is no longer optional, but absolutely necessary.

Preventing DDoS attacks

• Educate employees about DDoS attacks
• Update applications, software, and systems
• Implement robust network monitoring tools and detection systems to quickly identify suspicious traffic patterns
• Use risk assessments to identify potential vulnerabilities in the network infrastructure
• Implement a Captcha challenge to control automated bots
• Configure firewalls to filter suspicious traffic patterns and block traffic from known malicious IP addresses