Krebs OnSecurity Hit With Record DDoS
Summary: On Sept. 20, KrebsOnSecurity.com was hit by a DDoS attack that Akamai measured at roughly 620-665 Gbps, nearly double Akamai's previous record of 363 Gbps, and the site stayed online. Akamai's Martin McKeay said the flood came almost entirely from a large botnet of hacked devices using GRE packets and SYN, GET and POST floods rather than DNS reflection or amplification, suggesting a collection of possibly hundreds of thousands of systems spread across many regions.
Why it matters: McKeay's assessment that 'someone has a botnet with capabilities we haven't seen before' points to IoT devices - routers, IP cameras and DVRs - secured with weak or hard-coded passwords, and the leaked malware source code behind them has already been spun into more than a dozen variants.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026