Nokia Threat Report: DDoS and LOTL Among the Dangers

"Nokia's eleventh annual Threat Intelligent Report features, as usual, assessments that likely scare computer security experts and their corporate bosses. Specifically, the company found that 63% of respondents experienced at least one "living off the land" (LOTL) attacks during the past year. Thirty-two percent saw more than three. (CrowdStrike defines LOTL attacks as being "fileless - meaning they do not require an attacker to install any code or scripts within the target system. Instead, the attacker uses tools that are already present in the environment.")"

"Distributed denial of service (DDoS) attacks peaking in the 5 to 10 Tbps range are the "new normal." This is faster than most alert systems' ability to sound alarms. Seventy-eight percent of DDoS attacks now end within five minutes (compared to 44% last year). Thirty-seven percent end in under two minutes. This highlights the need for rapid detection and mitigation. More than 100 million residential endpoints (4% of the global total) are now available for exploits and malicious uses of bandwidth."

""Connectivity powers everything from public safety and financial transactions to digital identity. Recent attacks have reached lawful interception systems, leaked sensitive subscriber data and disrupted emergency services," Kal De, Nokia's Senior Vice President, Product and Engineering, Cloud and Network Services, said in a press release about the Nokia Threat Report. "The industry must fight back through shared threat intelligence, AI-driven dete"

63% of respondents experienced at least one living off the land (LOTL) attack in the past year, and 32% experienced more than three. LOTL attacks are fileless and rely on tools already present in target environments. Low-profile infections caused major data exposure and costly remediation. DDoS attacks peaking at 5–10 Tbps have become common and can outpace alert systems. Seventy-eight percent of DDoS attacks now end within five minutes, with 37% ending in under two minutes, creating demand for rapid detection and mitigation. Over 100 million residential endpoints are exposed for exploitation. Digital certificate lifetimes are shrinking while quantum readiness remains slow. Connectivity disruptions have impacted lawful interception, subscriber data, and emergency services.

Read at Telecompetitor