Loading story…
Gcore, a global provider of edge AI, cloud, network, and security solutions, successfully defended against one of the largest distributed denial-of-service (DDoS) attacks ever recorded, which peaked at 6 terabits per second (Tbps) and reached a packet rate of 5.3 billion packets per second (Bpps). The attack specifically targeted a hosting provider in the gaming sector, highlighting the increasing risk faced by technology and digital infrastructure companies. The DDoS campaign was characterized as a short-burst volumetric flood, primarily utilizing the UDP protocol, which is typical for such high-volume attacks. The duration of the attack was between 30 and 45 seconds, but its intensity and scale set new records in the industry. Analysis of the attack traffic revealed that 51% of the sources originated from Brazil and 23.7% from the United States, together accounting for nearly three-quarters of the malicious traffic. The methodology and magnitude of the attack were consistent with the AISURU botnet, which has been linked to several other high-impact incidents globally in recent months. Gcore’s security team emphasized that this event reflects a broader trend of escalating DDoS threats, both in terms of scale and sophistication, with attackers increasingly probing the resilience of digital infrastructure. The company’s recent Gcore Radar report for Q1-Q2 2025 indicated a 41% quarter-over-quarter increase in DDoS attacks, with tech companies now representing 30% of all recorded incidents. The multi-regional origin of the attack demonstrates the evolving capabilities of botnets, which are leveraging unsecured infrastructure in regions with high device density. Gcore’s mitigation efforts relied on robust, adaptive protection measures to absorb and neutralize the massive traffic surge, preventing disruption to the targeted gaming sector client. The incident underscores the necessity for organizations across technology, hosting, and enterprise sectors to invest in advanced DDoS protection solutions. Industry experts warn that without such defenses, companies remain vulnerable to increasingly frequent and powerful attacks. The attack’s short duration but extreme volume suggests that threat actors are experimenting with new tactics to overwhelm defenses before automated mitigation can fully engage. Gcore’s response to the incident has been cited as a benchmark for effective DDoS mitigation in the face of record-breaking attack volumes. The event has prompted renewed calls for global collaboration to address the root causes of botnet proliferation and to secure vulnerable infrastructure. Security professionals are advised to monitor for similar attack patterns and to update their incident response plans accordingly. The successful defense by Gcore has been widely reported in the cybersecurity community as a significant achievement in the ongoing battle against large-scale DDoS threats.
Pull IOCs and campaign context straight into your stack.
1 event from the most recent confirmed update back to the earliest known activity.
Gcore reported that it mitigated a distributed denial-of-service attack peaking at 6 Tbps, describing it as record-breaking. Multiple outlets covered the same incident, but no additional distinct real-world developments were provided in the references.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Pull the IOCs, campaigns, and victimology behind this family, ready to push into your SIEM and EDR.
3 references tracked. Mallory keeps watching after this page renders.
securitysenses.com
Open sourcehackread.com
Open sourcesecurityonline.info
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
DDoS attack volumes have surged by 41% in the first half of 2025 compared to the previous year, with the largest recorded attack peaking at 2.2 Tbps, according to Gcore's latest Radar report. Attackers are increasingly targeting the technology and financial sectors, shifting away from gaming, and are employing more sophisticated tactics that combine high-volume assaults with application-layer manipulation. The duration of attacks is also increasing, with a notable rise in assaults lasting between 10 and 30 minutes. These trends underscore the urgent need for organizations to strengthen their DDoS detection and mitigation capabilities to address the growing scale and complexity of threats.
Jun 29, 2026
Cloudflare successfully mitigated the largest distributed denial-of-service (DDoS) attack ever recorded, which peaked at 22.2 terabits per second and 10.6 billion packets per second. The attack, which lasted approximately 40 seconds, was automatically detected and blocked by Cloudflare’s network without service disruption. This incident was twice the size of any previous DDoS attack seen on the internet, highlighting the increasing scale and frequency of such attacks. Cloudflare did not disclose the specific target of the attack but emphasized the importance of robust, automated DDoS mitigation capabilities for organizations. The event underscores the ongoing escalation in DDoS attack volumes and the need for advanced protection measures.
Jun 29, 2026
Cloudflare successfully detected and mitigated the largest distributed denial-of-service (DDoS) attack on record, which peaked at 29.7 terabits per second and was attributed to the AISURU botnet. The attack, which lasted 69 seconds, utilized UDP carpet-bombing techniques targeting an average of 15,000 destination ports per second, and originated from a botnet-for-hire service leveraging between one and four million compromised routers and IoT devices worldwide. While the specific target of the attack was not disclosed, Cloudflare noted that the AISURU botnet has been responsible for a surge in hyper-volumetric DDoS attacks, particularly against telecommunications, gaming, hosting, and financial services sectors. AISURU's operations have resulted in over 2,800 attacks mitigated by Cloudflare since the start of the year, with nearly half classified as hyper-volumetric, exceeding 1 Tbps or 1 billion packets per second. The botnet's activity has not only set new records for DDoS attack volume but has also demonstrated the potential to disrupt internet service providers even when they are not the direct targets. The majority of attack sources have been traced to locations in Asia, and the overall frequency and scale of DDoS attacks have seen significant increases compared to previous quarters and years.
Jun 29, 2026