Krebs OnSecurity Hit By Huge New IoT Botnet “Meris”
Summary: KrebsOnSecurity was hit Thursday evening by a brief but massive DDoS attack from "Meris," a new botnet that Qrator Labs identified and that also struck Cloudflare at 17.2 million requests per second and Yandex at an estimated 21.8 million requests per second from roughly 250,000 infected devices. The attack on this site exceeded two million requests per second, more than four times the 2016 Mirai attack's approximately 450,000 requests per second, and Qrator says Meris appears to consist of MikroTik routers, with more than 42 percent of the world's internet-connected MikroTik systems in the United States.
What's compelling: Qrator estimates 250,000 MikroTik routers are already conscripted into Meris, and the United States hosts the largest share of potentially vulnerable devices at more than 42 percent - so the same population of routers that knocked Yandex and Cloudflare offline sits largely inside U.S. networks.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026