DDoS Attacks Double In A Year As Akamai Warns Of Future IPv6 Threat

A record number of distributed denial of service (DDoS) attacks were carried out during the first quarter of 2015, research has found.

A new report from Akamai found that the number of DDoS attacks doubled in the past year, increasing by more than a third from the last quarter alone. The typical attack now uses less bandwidth but lasts longer with the average attack duration increasing by 42.8 percent to 24.82 hours, typically using 10Gbps.

Despite this, there were eight “mega attacks” exceeding 100Gbps, with the largest recorded at 170Gbps.

Rise of SSDP

The company also highlighted the increasing use of the Simple Service Discovery Protocol (SSDP)  to stage such attacks and the growing threat of IPv6 methods.

A fifth made use of SSDP, a common protocol enabled by default on millions of home and office devices, such as routers, smart TVs, printers and webcams, to allow them to discover each other.

However if SSDP is left unsecured or misconfigured, such devices can act as “reflectors” to enhance the ferocity of DDoS attacks. SSDP exploitation is also having a knock-on effect on the power of ‘DDoS for hire’ vectors, which had peaked at 10-20Gbps, but are now capable of delivering 100Gbps and above.

The gaming industry was the most targeted, accounting for 35 percent of all DDoS, ahead of the tech sector which was targeted by a quarter. In terms of web application attacks, the retail sector was hit hardest, followed by media and entertainment.

Two thirds of web application attacks used the local file inclusion (LFI) vector, mainly due a massive campaign against two large retailers in March which exploited the WordPress RevSlider plugin, while 29 percent used a SQL injection (SQLi) attack. Researchers are concerned that SQLi attacks have the ability to move beyond more data theft, warning they have the potential to elevate privileges, execute commands and corrupt data.

Akamai has also warned more needs to be done to protect businsses against IPv6 attacks as the transition from IPv4 continues. It says that IPv6 DDoS are not yet common, but such methods are being tested, putting cloud providers and corporate networks at risks.

Many IPv4 DDoS methods can be used to stage IPv6 campaigns, while some IPv6-specific methods can even bypass IPv4 protections, potentially creating more powerful attacks.

How much do you know about hacking? Take our quiz to find out!

Steve McCaskill

Steve McCaskill is editor of TechWeekEurope and ChannelBiz. He joined as a reporter in 2011 and covers all areas of IT, with a particular interest in telecommunications, mobile and networking, along with sports technology.

Recent Posts

UK Government Partners Anthropic AI To Improve Public Services

Anthropic confirms Memorandum of Understanding (MOU) signed with UK government to explore use of AI…

2 days ago

ARM Shares Rise Amid Report Meta Will Purchase Its First Chip

British chip designer ARM Holdings is reportedly developing its own chip, and Meta is one…

2 days ago

TikTok Returns To Apple, Google Stores In US

TikTok returns to app stores of both Apple and Google in the United States, after…

2 days ago

Meta To Show Marketplace Ads From Rival Ad Providers

After huge fine, Meta launches 'Facebook Marketplace Partner Program' so rival service providers can list…

3 days ago

Improved Indoor Connectivity Could Add Billions To UK Economy – Survey

New research from Freshwave finds a better mobile signal indoors could grow the UK economy…

3 days ago

Musk Says He Will Withdraw OpenAI Bid If It Remains Non-Profit

Elon Musk says he will abandon $97.4 billion offer to buy the non-profit behind OpenAI…

3 days ago