BrianKrebs @briankrebs@infosec.exchange
Public

Guess I buried the lede on this Oct 10 story, which broke the news about a record 29+ Tbps DDoS from the Aisuru IoT botnet.

krebsonsecurity.com/2025/10/dd

Because tons of sites are writing about this latest quarterly report from Cloudflare is if this is somehow news.

blog.cloudflare.com/ddos-threa

To my mind, the real news is that we're way past 30 Tbps capability with this botnet, and we're safely moving into a territory (terrortory?) where only Cloudflare can handle these attacks. This is problematic on a multitude of levels, and it's probably worth restating that much of the DDoS for hire industry still hides behind CF. And apparently 68 percent of phishing sites, if these stats are credible.

blog.sicuranext.com/68-of-phis

DDoS Botnet Aisuru Blankets US ISPs in Record DDoS – Krebs on Security

The world's largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers like AT&T, Comcast and Verizon, new evidence suggests. Experts say the heavy concentration of infected…

krebsonsecurity.com

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://infosec.exchange/users/briankrebs/statuses/115684897789302652 on your instance and quote it. (Note that quoting is not supported in Mastodon.)