DDoS threat report for 2023 Q2
Jul 18, 2023Omer Yoachimik, Jorge Pacheco
Summary
This post details Cloudflare's Q2 2023 DDoS threat landscape, highlighting the increase in sophisticated and randomized HTTP DDoS attacks, a surge in DNS-based attacks including DNS Laundering, and the impact of hacktivist groups. It describes the technical challenges in mitigating highly randomized HTTP attacks that mimic browser behavior and the analysis of DNS Laundering attacks that leverage recursive DNS resolvers. The post also details the detection and mitigation of large-scale DDoS attacks, including an ACK flood from a Mirai-variant botnet and attacks associated with the 'Darknet Parliament' hacktivist alliance, providing insights into attack vectors, target industries, and mitigation strategies.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack