Cloudflare Blocks Record 11.5 Tbps DDoS Attack

Cloudflare mitigated a record-sized DDoS attack that peaked at 11.5 terabits per second (Tbps)—that’s 11.5 trillion bits each second—and 1.5 billion packets per second (pps). It was a UDP flood, lasted about 35 seconds, and the traffic mainly originated from Google Cloud. The video then shows how attacks like this are powered by botnets of hacked NVRs (security camera recorders) and other IoT devices. It cites a case of a 22-year-old charged over a DDoS-for-hire botnet called Rappobot, and a researcher who captured live traffic from an infected NVR and found an apparent zero-day path-traversal vulnerability on port 80 that downloaded account files. Final message: don’t expose IoT devices directly to the internet. #ddos #cloudflare #record