Last Gcore DDOS Radar Report Analysis of attacks on data from Q3 – Q4 2024, revealing 56% growth per year in the total DDOS attacks, with the largest attack, which reached the maximum in a record 2 TBP. In the financial services sector there is a sharp increase: by 117% of the attacks, while the games remained the most oriented industry. The results of this period emphasize the need for Reliable, Adaptive DDOS softening As the attacks become more accurate and frequent. Let’s plunge into the numbers.
Key trips: Future Defense DDOS
Here are four key trips from Gcore Radar:
- DDOS attacks increase by volume and sophistication. The growth of 17% of the total attacks and the new peak of 2 TBPs emphasize the need for advanced protection.
- Financial services face risks. With an increase in attacks by 117%, this sector requires enhanced security measures.
- The shorter, high intense attacks are now the norm. Traditional approaches to mitigating the consequences should adapt to the rapid attack that can shy away from detection.
- Geopolitical factors affect attack models. Understanding the origin of the attack can help strengthen protection in high -risk regions.
The DDOS attack rate increases to a new high level
The report emphasizes a constant increase in the incidence of attacks. Compared to the Q3-Q4 2023, DDOS attacks increased by 56%, emphasizing the long-term growth trend.
Gc
- Easy access to the attack tools: DDOS-for-rental and botnets reduced the barrier to launch the attacks.
- Expanding IOT vulnerabilities: Poorly fixed devices IoT continue to wate large botnets.
- Geopolitical and economic tensions: Political conflicts and financial motivations cause targeted attacks.
- More sophisticated attack strategies: The attacks with multiple vectors and applications complicate the mitigation of the consequences.
The greatest attack reaches 2 TBP
The biggest recorded attack in Q3 – Q4 2024 reached 2 TBPS, focusing on a major global game company. This is an 18% increase compared to the previous peak of 1.7 TBP in Q1 – Q2 2024.
While such large -scale attacks are often softened quickly, their destructive potential continues to grow. Terrobite attack attacks can cause extensive shutdowns and financial losses, especially for enterprises that depend on real -time operations.
Financial services threatens attack but the game remains the main goal
Games remain the most substituted sector, although its share in general attacks decreased from 49% in Q3-Q4 2023 to 34%. Possible explanations include:
- Improved DDOS protection causes attackers to switch focus
- Permanent motivation for attacks out of competitive games and financial incentives
- High impact on downtime income
It is also characterized by a sign of attacks on financial services that increase from 12% to 26% of the total incidents. Severe sector regulation, critical internet services and sensitivity to ransom-based attacks make it the main goal.
Complete Report Radar Gcore It shares branch data for media and entertainment, retailers, telecommunications, technology and other industries.
Lifting the floods and shorter explosions
DDOS attack distribution across the network and application layers during the H2 2024 emphasizes the greater prevalence of attacks on the network layers.
On the network layer, the UDP flood attacks remain the most common method, which is 60% of all network attacks. However, ACK flood attacks are increasing and now make up 7% of general attacks. These attacks mimic legitimate movement, making the mitigation more difficult.
At the L7 UDP app level, the Floods were 45%, and the TCP flood attacks increased to 37%. Gc
Shorter but more devastating attacks
One of the most notable shifts is the reduction in the duration of the attack. The longest recorded attack in Q3 – Q4 2024 lasted only five hours, compared to 16 hours in the previous period.
The shorter, high intense attacks are becoming more common. These attacks:
- Quickly break the services avoiding sustainable detection.
- Mimic legitimate models of movementmaking the mitigation of the consequences more complicated.
- Serves smoke prices For other cyberators, including redemption.
Geopolitical influence
Geopolitical tensions and economic rivalries continue to form a DDOS landscape, while politically motivated attacks aimed at financial services, critical infrastructure and high -cost enterprises. Meanwhile, regions with dense online infrastructure are like the Netherlands, the USA and China-in the quality of launchers and battle for cybercrime groups that use botnets, proxies and DDOS services for rental.
The report defines key regions that contribute to DDOS traffic:
- US and Netherlands are the main sources for both layers of the attack.
- Brazil This is a growing center for network attacks.
- China and Indonesia Both make a significant contribution to the global attack volumes.
Download Full report For geographical data Attack Attack Attack.
Gc
GCOR DDOS protection Using the 200+ TBPS filtering power on six continents to neutralize the attack mode. As DDOS threats develop, organizations must accept active protection strategies to protect their digital assets.
Note: This article is written and contributed to Andrei Slustenov, Head of Security in Gcore.