Aisuru botnet turns was a terabit-scale internet stress test
Briefly

Aisuru botnet turns was a terabit-scale internet stress test
"Aisuru is a relative newcomer to the botnet scene. It was first spotted in 2024, but it has quickly grown into a Mirai-class monster built from hijacked routers, cameras, and other bargain-basement IoT gear. Despite its humble parts, it punches far above its weight, firing off multi-terabit, multibillion-packet-per-second DDoS blasts that make earlier Mirai variants look almost low-key by comparison."
"In its latest quarterly report, Cloudflare reveals Aisuru is now thought to command between 1 million and 4 million infected devices worldwide. That global horde routinely pumped out DDoS attacks topping 1 terabit per second and 1 billion packets per second. On average, that amounted to roughly 14 hyper-volumetric attacks a day - a 54 percent quarter-on-quarter increase."
"Aisuru's firepower isn't just consistent; it's record-breaking. In Q3, one attack peaked at 29.7 Tbps, a new high water mark for volumetric disruption. The assault was delivered as a "UDP carpet-bombing" flood, blasting traffic across roughly 15,000 destination ports per second while using randomized packet attributes to evade legacy defenses. Cloudflare says that since the start of 2025, it has already mitigated 2,867 Aisuru-linked attacks, with 1,304 of them hyper-volumetric fires in Q3 alone."
Aisuru emerged in 2024 and rapidly evolved into a Mirai-class botnet composed of hijacked routers, cameras, and other low-end IoT devices. It commands an estimated 1–4 million infected devices worldwide and routinely generates DDoS floods exceeding 1 Tbps and 1 billion packets per second. Attack frequency averaged about 14 hyper-volumetric events per day, a 54% quarter-on-quarter rise. In Q3 one attack peaked at 29.7 Tbps using a UDP "carpet-bombing" across roughly 15,000 destination ports per second with randomized packet attributes. Cloudflare mitigated thousands of Aisuru-linked attacks and blocked 8.3 million DDoS attempts in the quarter.
Read at Theregister
Unable to calculate read time
[
|
]