{"id":268047,"date":"2018-07-12T12:16:11","date_gmt":"2018-07-12T10:16:11","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=268047"},"modified":"2018-07-12T12:17:29","modified_gmt":"2018-07-12T10:17:29","slug":"new-ddos-attack-peaks-at-1-3tbps","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/268047-new-ddos-attack-peaks-at-1-3tbps.html","title":{"rendered":"New DDoS attack peaks at 1.3Tbps"},"content":{"rendered":"<p>Akamai has released its latest State of the Internet Security <a href=\"https:\/\/www.akamai.com\/uk\/en\/about\/our-thinking\/state-of-the-internet-report\/global-state-of-the-internet-security-ddos-attack-reports.jsp\" target=\"_blank\" rel=\"noopener\"><strong>report<\/strong><\/a>, which shows that the average DDoS attack size doubled in early 2018.<\/p>\n<p>This increase in attack traffic followed after attackers discovered and employed a new DDoS reflection and amplification method with the potential to multiply their attack resources by a factor of 500,000.<\/p>\n<p>The attack vector, called <a href=\"https:\/\/blogs.akamai.com\/2018\/02\/memcached-udp-reflection-attacks.html\" target=\"_blank\" rel=\"noopener\"><strong>memcached UDP reflection<\/strong><\/a>, uses resources exposed on the Internet &#8211; with no malware or botnet required.<\/p>\n<p>Memcached is a tool meant to cache data and reduce strain on heavier data stores, like disk or databases, and no authentication is required.<\/p>\n<p>When this is added to the ability to spoof IP addresses of UDP traffic, the protocol can be abused as a reflector when exposed to the Internet.<\/p>\n<p>In February 2018, a memcached reflector attack set a new record for the largest attack Akamai has mitigated to date.<\/p>\n<p>At 1.3Tbps, the attack more than doubled the previous record of 623Gbps &#8211; achieved by Mirai in September 2016.<\/p>\n<p>Median DDoS attack sizes also continued to increase over the past year, now reaching 1.3Gbps.<\/p>\n<p>Akamai highlighted that a swift response by developers, network operators, and service providers has quickly reduced the number of vulnerable memcached servers.<\/p>\n<p>This quick response has limited the potential of this new attack vector in the future.<\/p>\n<p><a href=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/07\/DDoS-Attacks.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-268051\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/07\/DDoS-Attacks.jpg\" alt=\"DDoS Attacks\" width=\"640\" height=\"3520\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/07\/DDoS-Attacks.jpg 800w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/07\/DDoS-Attacks-768x4224.jpg 768w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2018\/07\/DDoS-Attacks-78x430.jpg 78w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/a><\/p>\n<h3 class=\"my-4\">Now read:\u00a0<a href=\"https:\/\/mybroadband.co.za\/news\/security\/255771-cloudflare-spectrum-ddos-protection-for-the-rest-of-the-internet.html\" target=\"_blank\" rel=\"noopener\">Cloudflare Spectrum \u2013 DDoS protection for the rest of the Internet<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>Attackers used a new DDoS reflection and amplification method.<\/p>\n","protected":false},"author":23,"featured_media":189026,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[3340,2242],"class_list":["post-268047","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-akamai","tag-ddos"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/268047"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=268047"}],"version-history":[{"count":2,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/268047\/revisions"}],"predecessor-version":[{"id":268061,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/268047\/revisions\/268061"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/189026"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=268047"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=268047"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=268047"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}