A powerful botnet has flexed its muscles once again by launching a massive 15.7 Tbps DDoS attack against a customer on Microsoft’s Azure cloud computing service.
The incident occurred on Oct. 24, with Microsoft indicating it involved over 500,000 devices generating internet traffic in an attempt to knock a target offline.
The company traced the DDoS to the “Aisuru” botnet, which was responsible for the largest DDoS on record back in September. That attack peaked at 22.2 Tbps, while also pushing 10.6 billion packets per second from over 300,000 devices. It targeted a customer on Cloudflare, an internet infrastructure company that also provides DDoS protection.
The Oct. 24 attack targeted a single endpoint based in Australia. Microsoft didn’t elaborate, but it looks like the company automatically mitigated the impact, preventing it from overwhelming its services. “Malicious traffic was effectively filtered and redirected, maintaining uninterrupted service availability for customer workloads,” it said in a blog post.
Operating since at least last year, Aisuru has made a name for itself by launching record-breaking DDoS attacks. The botnet hijacks internet-connected devices, such as vulnerable home routers and internet cameras across the globe, and then uses them in DDoS attacks, which try to overwhelm a website, mobile app, or server with a flood of internet traffic.
Aisuru’s creators sell access to the botnet, mainly so buyers can attack game servers, including those used for Minecraft. In late September, the botnet appeared to have launched a more powerful DDoS that reached 29.6 Tbps, but it was merely for demonstration purposes, according to security journalist Brian Krebs.
Recommended by Our Editors
It used to be rare for DDoS attacks to exceed 1Tbps. But as Internet of Things (IoT) devices proliferate, more of them have access to faster networks, paving a way for botnets to access greater firepower.
“Attackers are scaling with the internet itself. As fiber-to-the-home speeds rise and IoT devices get more powerful, the baseline for attack size keeps climbing,” Microsoft says.
Get Our Best Stories!
Stay Safe With the Latest Security News and Updates
Thanks for signing up!
Your subscription has been confirmed. Keep an eye on your inbox!
About Our Expert
Senior Reporter
Since 2020, I’ve covered the launch and explosive growth of SpaceX’s Starlink satellite internet service, writing 600+ stories on availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival providers like AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I’ve combed through FCC filings for the latest news and driven to remote corners of California to test Starlink’s cellular service.
I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. Earlier this year, the FTC forced Avast to pay consumers $16.5 million for secretly harvesting and selling their personal information to third-party clients, as revealed in my joint investigation with Motherboard.
I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I’m now following how President Trump’s tariffs will affect the industry. I’m always eager to learn more, so please jump in the comments with feedback and send me tips.
var facebookPixelLoaded = false;
window.addEventListener('load', function() {
document.addEventListener('scroll', facebookPixelScript);
document.addEventListener('mousemove', facebookPixelScript);
});
function facebookPixelScript() {
if (!facebookPixelLoaded) {
facebookPixelLoaded = true;
document.removeEventListener('scroll', facebookPixelScript);
document.removeEventListener('mousemove', facebookPixelScript);
window.zdconsent.cmd.push(function() {
! function(f, b, e, v, n, t, s) {
if (f.fbq) return;
n = f.fbq = function() {
n.callMethod ? n.callMethod.apply(n, arguments) : n.queue.push(arguments)
};
if (!f._fbq) f._fbq = n;
n.push = n;
n.loaded = !0;
n.version = '2.0';
n.queue = [];
t = b.createElement(e);
t.async = !0;
t.src = v;
s = b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t, s)
}(window, document, 'script', '//connect.facebook.net/en_US/fbevents.js');
fbq('init', '454758778052139');
fbq('track', "PageView");
});
}
}