Full Breakdown
Record-Breaking DDoS Attack Linked to AISURU Botnet
12/4/2025, 11:44:48 PM
Overview of the Attack
On December 6, 2025, Cloudflare reported the detection and mitigation of the largest distributed denial-of-service (DDoS) attack to date, peaking at 29.7 terabits per second (Tbps). This attack, attributed to the AISURU botnet, lasted for 69 seconds and utilized a technique known as UDP carpet-bombing, which targeted an average of 15,000 destination ports per second. AISURU is believed to consist of 1 to 4 million compromised devices worldwide, making it a formidable force in the realm of cyberattacks.
Trends in DDoS Attacks
The third quarter of 2025 saw a significant increase in DDoS activity, with Cloudflare mitigating a total of 8.3 million attacks, marking a 40% rise compared to the previous year. Among these, 1,304 were classified as hyper-volumetric attacks exceeding 1 Tbps, a notable increase from earlier quarters. The report indicated that 71% of HTTP DDoS attacks and 89% of network-layer attacks lasted less than 10 minutes, underscoring the rapid nature of these threats.
Impacted Sectors and Geopolitical Influences
The sectors most affected by DDoS attacks included information technology, telecommunications, and gambling. Notably, attacks against artificial intelligence companies surged by 347% in September 2025, coinciding with heightened discussions around AI regulation. The automotive industry also experienced a significant rise, moving up 62 spots on the list of most attacked sectors, likely influenced by ongoing trade tensions between the European Union and China.
Geographic Distribution of Attacks
The geographic distribution of DDoS attacks revealed that Asia was the primary source, with Indonesia, Thailand, and Bangladesh among the top contributors. China remained the most targeted country, followed by Turkey, Germany, Brazil, and the United States. The Maldives and France saw dramatic increases in attack frequency during periods of national unrest, indicating a trend where threat actors exploit societal instability.
Official Statements & Responses
Cloudflare emphasized the evolving nature of DDoS attacks, stating, "We've entered an era where DDoS attacks have rapidly grown in sophistication and size — beyond anything we could've imagined a few years ago." Jake Moore, Global Cybersecurity Advisor at ESET, noted the challenges organizations face in keeping pace with these threats, advocating for increased reliance on automated defense systems to counteract the speed and scale of modern DDoS campaigns.
Criticism & Opposition
Experts have raised concerns regarding the effectiveness of traditional defense mechanisms against such large-scale attacks. Moore highlighted that "relying on legacy filtering or static rules is not always enough," suggesting that organizations must continuously adapt their defenses to meet the evolving tactics of cybercriminals.
Verbatim Quotes
- “The 29.7 Tbps was a UDP carpet-bombing attack bombarding an average of 15,000 destination ports per second,” — Omer Yoachimik, Cloudflare
- “Cybercriminals attack from all angles and are incredibly relentless in their attempts.” — Jake Moore, Global Cybersecurity Advisor at ESET
This record-breaking DDoS attack serves as a stark reminder of the increasing sophistication and scale of cyber threats, necessitating a proactive approach to cybersecurity in the digital age.
