Hackers have changed their DDoS attack tactics

Hackers have changed their DDoS attack tactics.

Hackers reduced the duration of their attacks but increased other parameters: the average attack power in terms of capacity (Gbps) increased by 18%, repeating last year's record of 710 Gbps.

Speed ​​indicators also increased significantly. While previously attackers tried to conduct slow attacks to make them look like normal traffic, they now focused on speed: the average increased by 39%, and the most powerful attack on MegaFon customers doubled to 72,210 Gbps.

Hackers are increasingly less interested in the banking sector, but attacks against it remain regular. Meanwhile, the number of incidents against telecoms is not increasing. Public sector companies are also consistently targeted by hackers, and the content provider sector has become a new favorite: online cinemas, video platforms, music, and streaming services are increasingly facing threats. Previously, companies often requested the service during a DDoS attack, which complicated protection settings and slowed response times. Now, such incidents have decreased more than fivefold.

"Attackers use different combinations of attack parameters, attempting to influence effectiveness. Hackers adapt their strategies based on the response of our defense systems. The larger and more diverse the traffic, the more difficult it is to filter. However, anti-DDoS analyzes the behavior of each request to distinguish legitimate from malicious ones. The fact that we've recorded a higher proportion of attacks in the current half of the year, exceeding previous years' figures, is due to several factors: increased traffic and internet usage by users overall, greater availability of botnets and the efficient distribution of load between them, and the sending of various requests that force servers to respond with large volumes of data.