UK becomes the world's number two target for DDoS hackers

'Boredom and spite' behind 220% increase in DDoS attacks, finds Imperva

Hacking

DDoS attacks have increased more than 220%, with the UK becoming the second most popular target in the world, according to research conducted by security firm Imperva.

The company's annual DDoS threat landscape report found that DDoS - or Distributed Denial of Service - attacks rose by 221% between 1 April 2015 and 31 March 2016.

This uptick was fuelled by the increasing availability of IP stressers and booters, which can effectively act as a 'DDoS-for-hire' service, Imperva said. Use of these tools comprised over 90% of all DDoS attacks in Q1 2016.

Booters and stressers are commonly used to stress-test websites' ability to cope with massive traffic volumes, but can also be used by malicious hackers as a cheap and easy way to take a site offline by flooding it with traffic.

Advertisement
Advertisement - Article continues below

The US fared worst in the number of DDoS attacks suffered, experiencing 50.3% of all attacks in Q1 2016, followed by the UK at 9.2%, then Japan at 6.7%, while the Germany suffered 3.1% of attacks and the Netherlands counted 2.9%.

UK businesses suffered a huge 23.2% of all attacks in the last three months of 2015, Its report read: "While the majority of attacks in the UK targeted small and medium sized organizations, this trend also translated into several high-profile assaults, including the takedowns of the BBC, HSBC UK and the Irish National Lottery."

"Distributed Denial of Service (DDoS) attacks are now readily available as a subscription service for the price of a deli Sandwich," said ESET security specialist Mark James, "and these services enable you to have all the benefits of large traffic based attacks without the need of the hardware to back it up.

Sadly many small businesses will not have any measures in place to mitigate these types of attacks, seeking help through professional services and expertise should be on your list when taking the multi-layered security approach you need in protecting the modern digital business."

"The fact that DDoS-for-hire now accounts for over 90 percent of all assaults paints a new profile of top bad actors," the report added. "These are non-professionals who use DDoS for racketeering or to instigate attacks out of boredom or spite. The existence of such unpredictable offenders poses a new threat to many online entities that traditionally didn't consider themselves a potential target."

This "hobbyist" activity means that most of the DDoS activity observed by Imperva was brief and unsophisticated, with 66% of attacks using just one attack vector and almost 90% lasting less than an hour.

However, the figures also revealed how hackers can use DDoS attacks as part of a wider breach strategy. According to Imperva, experienced hackers sometimes launch multiple short DDoS attacks, spaced out over weeks.

This has the effect of exhausting security and response teams by keeping them on high alert around the clock. DDoS attacks can also be used as a smokescreen, distracting security operatives from a hackers's real goal, such as sabotage or data exfiltration.

Imperva's research also revealed that attackers are becoming more persistent. In the first quarter of 2016, half of all targets were hit by more than one attack, with nearly 20% hit by almost five.

Featured Resources

The essential guide to cloud-based backup and disaster recovery

Support business continuity by building a holistic emergency plan

Download now

Trends in modern data protection

A comprehensive view of the data protection landscape

Download now

How do vulnerabilities get into software?

90% of security incidents result from exploits against defects in software

Download now

Delivering the future of work - now

The CIO’s guide to building the unified digital workspace for today’s hybrid and multi-cloud strategies.

Download now
Advertisement

Recommended

Visit/security/354156/google-confirms-android-cameras-can-be-hijacked-to-spy-on-you
Security

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019
Visit/security/29204/how-can-you-protect-your-business-from-crypto-ransomware
Security

How can you protect your business from crypto-ransomware?

4 Nov 2019
Visit/back-up/29084/how-to-enhance-your-backup-strategy
backup

How to enhance your backup strategy

10 Oct 2019
Visit/data-loss-prevention/28864/data-recovery-why-is-it-so-important
data recovery

Data recovery: Why is it so important?

9 Oct 2019

Most Popular

Visit/mobile/mobile-phones/354222/samsung-sails-past-apples-market-share-despite-smartphone-market-slump
Mobile Phones

Samsung sails past Apple's market share despite smartphone market slump

28 Nov 2019
Visit/hardware/354232/raspberry-pi-4-owners-complain-of-broken-wi-fi-when-using-hdmi
Hardware

Raspberry Pi 4 owners complain of broken Wi-Fi when using HDMI

29 Nov 2019
Visit/mobile/google-android/354189/samsung-galaxy-a90-5g-review-simply-the-best-value-5g-phone
Google Android

Samsung Galaxy A90 5G review: Simply the best value 5G phone

22 Nov 2019
Visit/business-strategy/digital-transformation/354201/boston-dynamics-dog-like-robots-sniff-out-bombs-for
digital transformation

Boston Dynamics dog-like robots sniff out bombs for Massachusetts police

26 Nov 2019