NEWS & EVENTS

Large-Scale DDoS Attacks Grow Bigger and More Diversified According to Prolexic’s Latest Report

January 17, 2013

 

Seven 50+ Gbps attacks mitigated against financial, SaaS and e-Commerce firms

HOLLYWOOD, FL – (January 17, 2013) – Prolexic Technologies, the global leader in Distributed Denial of Service (DDoS) protection services, today announced that the scale and diversity of attacks increased against its global client base in Q4 2012. This is one of a number of key findings contained in the company’s Quarterly Global DDoS Attack Report, which was published today.

While Q4 media reports focused on large DDoS attacks primarily against U.S. financial services companies, Prolexic also mitigated 50+ Gbps DDoS attacks against clients in the e-Commerce and software as a service (SaaS) sectors. While the itsoknoproblembro (BroDoS) toolkit was used against financial services firms in Q4, data shows it was also used against businesses in other sectors. Digital forensics by the Prolexic Security Engineering & Response Team (PLXsert) also found that malware besides Brodos was used in Q4 to generate equally large bandwidth attacks.

“The fourth quarter was defined by the increasing scale and diversity of DDoS attacks,” said Prolexic CEO, Scott Hammack. “While bandwidth attacks of 20 Gbps were the story last quarter, 50 Gbps is more relevant now.”

Highlights from Prolexic’s Q4 2012 Global DDoS Attack Report

Compared to Q3 2012

  • 27.5 percent increase in total number of attacks

  • 17 percent increase in total number of infrastructure attacks; 72 percent rise in total number of application attacks

  • 67 percent increase in average attack duration to 32.2 hours from 19.2 hours

  • 20 percent increase in average attack bandwidth from 4.9 to 5.9 Gbps

  • China retains its position as the top source country for DDoS attacks

Compared to Q4 2011

  • 19 percent increase in total number of DDoS attacks

  • 15 percent rise in total number of infrastructure attacks; 30 percent rise in total number of application attacks

  • 6 percent decline in average attack duration to 32.2 hours from 34

  • 13 percent increase in average attack bandwidth from 5.2 Gbps to 5.9 Gbps

Analysis and emerging trends

During Q4 2012, Prolexic mitigated seven attacks over 50 Gbps directed against clients in the financial services, e-Commerce and SaaS verticals. “A case could be made that the size of attacks that are being reported in the financial services industry really just reflects the normal growth in DDoS,” said Hammack. “We are seeing similarly sized attacks in other verticals, but they don’t make headlines because companies in these industries are not required to report it in the same way.”

In addition to increasing attack sizes, attack volume grew in Q4 2012 and reached the highest number of attacks Prolexic has logged for one quarter. Like the previous quarter, traditional Layer 3 and Layer 4 infrastructure attacks were the favored attack type, accounting for 75 percent of total attacks during the quarter, with application layer attacks making up the remaining 25 percent. This split has remained consistent throughout 2012. This quarter, SYN (24 percent), GET (20 percent), ICMP (18 percent) and UDP (15 percent) floods were the attack types most often encountered during mitigation.

Average attack duration increased 67 percent from 19.2 hours in Q3 2012 to 32.2 hours this quarter. November was the most active month for attacks, however, the total number of attacks for all three months of the quarter were consistent, showing a less than 10 percent difference from month to month. The week of Nov. 26 was the most active of the quarter, although only by a narrow margin.

As is commonplace, the top 10 list of source countries responsible for launching the most DDoS attacks was fluid. However, this quarter China secured the top place in attack source country rankings by a wide margin. Compared to last quarter, the United States dropped down in the rankings, while two European countries, France and Germany, rejoined the top 10 list.

“The take away for businesses from this Q4 report is to make sure that their DDoS mitigation provider can handle attacks in excess of 50 Gbpsin a single location,” said Hammack. “When attacks are this large, it’s important that the provider can mitigate this volume of attack traffic in one place and distribute it effectively so it does not compromise intermediary transit providers and affect others.”

Data for the Q4 2012 report has been gathered and analyzed by the PLXsert. The group monitors malicious cyber threats globally and analyzes DDoS attacks using proprietary techniques and equipment. Through digital forensics and post-attack analysis, PLXsert builds a global view of DDoS attacks, which is shared with Prolexic customers. By identifying the sources and associated attributes of individual attacks, PLXsert helps organizations adopt best practices and make more informed, proactive decisions about DDoS threats.

A complimentary copy of the Prolexic Quarterly Attack Report for Q4 2012 is available as a free PDF download from www.prolexic.com/attackreports. Prolexic’s Q1 2013 report will be released in the second quarter of 2013.

About Prolexic

Prolexic is the world’s largest, most trusted Distributed Denial of Service (DDoS) mitigation provider. Able to absorb the largest and most complex attacks ever launched, Prolexic restores mission-critical Internet-facing infrastructures for global enterprises and government agencies within minutes. Ten of the world’s largest banks and the leading companies in e-Commerce, SaaS, payment processing, travel/hospitality, gaming and other at-risk industries rely on Prolexic to protect their businesses. Founded in 2003 as the world’s first in-the-cloud DDoS mitigation platform, Prolexic is headquartered in Hollywood, Florida and has scrubbing centers located in the Americas, Europe and Asia. To learn more about how Prolexic can stop DDoS attacks and protect your business, please visit www.prolexic.com, follow us on LinkedIn, Facebook, Google+, YouTube, and @Prolexic on Twitter.
Contact:

Michael E. Donner
SVP, Chief Marketing Officer
Prolexic
media@prolexic.com
+1 (954) 620 6017

Customer Spotlight
  • Alliant Credit Union

    Prolexic DDoS protection keeps more than 50,000 daily users online

    DOWNLOAD CASE STUDY >>
  • Fragrance and Beauty Products Retailer

    A DDoS attack takes down this popular site for 24 hours. Prolexic restores in 5 minutes.

    DOWNLOAD CASE STUDY >>
  • Leading Online Jewelry Retailer

    A DDoS attack took down the site of a premier jewelry retailer for nearly three days.

    DOWNLOAD CASE STUDY >>
  • Online Options Trading

    Financial services firm avoids extortion attempt. Prolexic keeps web site up during vicious Layer 7 attack.

    DOWNLOAD CASE STUDY >>
  • e-Commerce Startup

    When others couldn't mitigate the latest DDoS attack, a "daily deal" web site called Prolexic: problem solved in 2 hours.

    DOWNLOAD CASE STUDY >>
  • A Leading Content Rating Organization

    A 9 million packets per second DDoS attack brings down web site before Prolexic steps in.

    DOWNLOAD CASE STUDY >>
  • Spa and Wellness Firm

    Prolexic quickly stops a combination Layer 4 and 7 DDoS attack after a host's mitigation capabilities falls short.

    DOWNLOAD CASE STUDY >>
  • Foundation Management

    Prolexic mitigates GET flood in minutes for new client after Sunday night emergency call.

    DOWNLOAD CASE STUDY >>
  • Web site building and hosting services firm

    Prolexic mitigates Layer 4 UDP flood peaking at 6.2 Gbps. Protects 6 million Yolasites.

    DOWNLOAD CASE STUDY >>
  • Online Movie Subscription Service

    After seeing all traffic route to Prolexic, hackers pull the plug on DDoS attack.

    DOWNLOAD CASE STUDY >>
  • IPG Holdings Limited

    Prolexic mitigates Layer 7 GET floods targeting payment processing platform.

    DOWNLOAD CASE STUDY >>
  • VirtualRoad.org

    Prolexic mitigates politically motivated attacks against web hosting company's clients.

    DOWNLOAD CASE STUDY >>
  • Financial Services Firm Global eSolutions

    Prolexic mitigates Layer 3, 4 and 7 attacks against Forex trading platform.

    DOWNLOAD CASE STUDY >>
  • Krebs on Security

    Prolexic fends off Pandora DNS amplification attacks for popular cyber security blog.

    DOWNLOAD CASE STUDY >>
  • e-Commerce Provider of Printed Promotion Items

    Prolexic mitigates two-week Layer 7 DDoS attack campaign.

    DOWNLOAD CASE STUDY >>
  • Global Blogging Site

    Prolexic protects freedom of speech for 30 million users targeted by six-month political DDoS campaign.

    DOWNLOAD CASE STUDY >>
  • Online Credit Card Site

    Prolexic mitigates Layer 4 DDoS attacks against Ixaris site, EntroPay.com.

    DOWNLOAD CASE STUDY >>
  • e-Commerce Web Site

    Prolexic mitigates 25-40 Gbps Layer 3 DDoS attacks against online auto parts retailer.

    DOWNLOAD CASE STUDY >>
  • Timepieces e-Commerce Site

    Prolexic keeps World of Watches ticking after DDoS attack flood site.

    DOWNLOAD CASE STUDY >>
  • PayPro Global

    Prolexic mitigates 16-hour Layer 7 DDoS attack on software distribution site.

    DOWNLOAD CASE STUDY >>
  • Henyep Capital Markets

    Prolexic keeps Henyep accessible and trading through multiple SYN, GET and ICMP flood attacks.

    DOWNLOAD CASE STUDY >>
  • Australia’s #1 Job Search Website

    Prolexic keeps Seek.com.au online and incident-free for millions of job seekers.

    DOWNLOAD CASE STUDY >>
  • e-Commerce Hosting Provider for Top Tier Sites

    Prolexic keeps Americaneagle.com and its customers generating revenue

    DOWNLOAD CASE STUDY >>
  • Customer ROI requires online accessibility and reliability

    Prolexic ensures Clickpoint! Media's online services are available and incident-free

    DOWNLOAD CASE STUDY >>
  • University Federal Credit Union

    Prolexic's mitigation services now protect credit union with US$1.6 Billion in assets

    DOWNLOAD CASE STUDY >>
  • 1ink.com

    Prolexic mitigates 70 Gbps SYN flood DDoS attack for popular ink retailer

    DOWNLOAD CASE STUDY >>
  • Arab National Bank

    Builds strong DDoS defense to serve online banking customers and e-trade site

    DOWNLOAD CASE STUDY >>
  • OnCourse Systems for Education

    Prolexic succeeded where two other mitigation firms failed

    DOWNLOAD CASE STUDY >>
Announcements
  • Q2 2014 Global DDoS Attack Report

    Malicious actors switch tactics to build, deploy and conceal powerful botnets

    LEARN MORE >>
  • Akamai at Black Hat USA 2014

    Visit Akamai at Booth 858 at Black Hat USA 2014, August 6-7

    LEARN MORE >>
  • Akamai Edge 2014 in Miami: October 8-10

    The premier event for Internet innovators, tech professionals and online business pioneers.

    LEARN MORE >>