Loading story…
DDoS attack volumes have surged by 41% in the first half of 2025 compared to the previous year, with the largest recorded attack peaking at 2.2 Tbps, according to Gcore's latest Radar report. Attackers are increasingly targeting the technology and financial sectors, shifting away from gaming, and are employing more sophisticated tactics that combine high-volume assaults with application-layer manipulation. The duration of attacks is also increasing, with a notable rise in assaults lasting between 10 and 30 minutes. These trends underscore the urgent need for organizations to strengthen their DDoS detection and mitigation capabilities to address the growing scale and complexity of threats.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Gcore released a new Radar report finding that DDoS attack volumes increased by 41% and that the technology sector overtook gaming as the most targeted industry. Multiple outlets reported the same report and its key findings on the same day.
4 references tracked. Mallory keeps watching after this page renders.
securityonline.info
Open sourcehackread.com
Open sourcethehackernews.com
Open sourcesecuritysenses.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Link11's latest report reveals a 225% increase in DDoS attacks in the first half of 2025 compared to the previous year, with attackers employing more sophisticated and prolonged methods. The attacks reached volumes of 438 terabytes and included advanced Layer 7 techniques that mimic legitimate traffic, as well as politically motivated campaigns by groups like NoName057(16). The report urges organizations to adopt real-time monitoring, AI-driven defenses, and robust contingency planning to counter these evolving threats.
Jun 29, 2026
Gcore, a global provider of edge AI, cloud, network, and security solutions, successfully defended against one of the largest distributed denial-of-service (DDoS) attacks ever recorded, which peaked at 6 terabits per second (Tbps) and reached a packet rate of 5.3 billion packets per second (Bpps). The attack specifically targeted a hosting provider in the gaming sector, highlighting the increasing risk faced by technology and digital infrastructure companies. The DDoS campaign was characterized as a short-burst volumetric flood, primarily utilizing the UDP protocol, which is typical for such high-volume attacks. The duration of the attack was between 30 and 45 seconds, but its intensity and scale set new records in the industry. Analysis of the attack traffic revealed that 51% of the sources originated from Brazil and 23.7% from the United States, together accounting for nearly three-quarters of the malicious traffic. The methodology and magnitude of the attack were consistent with the AISURU botnet, which has been linked to several other high-impact incidents globally in recent months. Gcore’s security team emphasized that this event reflects a broader trend of escalating DDoS threats, both in terms of scale and sophistication, with attackers increasingly probing the resilience of digital infrastructure. The company’s recent Gcore Radar report for Q1-Q2 2025 indicated a 41% quarter-over-quarter increase in DDoS attacks, with tech companies now representing 30% of all recorded incidents. The multi-regional origin of the attack demonstrates the evolving capabilities of botnets, which are leveraging unsecured infrastructure in regions with high device density. Gcore’s mitigation efforts relied on robust, adaptive protection measures to absorb and neutralize the massive traffic surge, preventing disruption to the targeted gaming sector client. The incident underscores the necessity for organizations across technology, hosting, and enterprise sectors to invest in advanced DDoS protection solutions. Industry experts warn that without such defenses, companies remain vulnerable to increasingly frequent and powerful attacks. The attack’s short duration but extreme volume suggests that threat actors are experimenting with new tactics to overwhelm defenses before automated mitigation can fully engage. Gcore’s response to the incident has been cited as a benchmark for effective DDoS mitigation in the face of record-breaking attack volumes. The event has prompted renewed calls for global collaboration to address the root causes of botnet proliferation and to secure vulnerable infrastructure. Security professionals are advised to monitor for similar attack patterns and to update their incident response plans accordingly. The successful defense by Gcore has been widely reported in the cybersecurity community as a significant achievement in the ongoing battle against large-scale DDoS threats.
Jun 29, 2026
The cybersecurity landscape in 2025 was marked by a series of high-impact incidents and evolving threat trends, with identity-driven intrusions, large-scale breaches, and record-breaking DDoS attacks dominating the year. Notable breaches at organizations such as Ingram Micro, Conduent, and Kettering Health resulted in hundreds of millions of dollars in losses, with regulatory filings and industry analyses highlighting the significant operational and financial impacts. Attackers increasingly exploited known vulnerabilities, with the CISA Known Exploited Vulnerabilities (KEV) catalog serving as a critical indicator of attacker intent, and legacy flaws resurfacing as major risk factors. The year also saw a strategic shift in security operations, with organizations prioritizing risk-based decision-making over exhaustive control coverage, and automation and real-time intelligence becoming essential for defense. DDoS attacks reached unprecedented scales, with Cloudflare reporting attacks peaking at 31 Tbps and the emergence of massive botnets like Aisuru. These attacks were often used as smokescreens for deeper intrusions, and the growing sophistication and speed of DDoS campaigns rendered traditional scrubbing-center defenses increasingly obsolete. Geopolitical tensions further shaped the threat landscape, with critical infrastructure and sectors such as gaming and gambling frequently targeted. The industry’s response emphasized the need for adaptive, globally distributed mitigation strategies and highlighted the importance of governance, consent management, and just-in-time administration to separate resilient organizations from those more vulnerable to systemic risk.
Jun 29, 2026