Microsoft Thwarts Record 15.72 Tbps DDoS Attack from AISURU Botnet

Bassyonni

ago 2 hours

Microsoft Thwarts Record 15.72 Tbps DDoS Attack from AISURU Botnet

Microsoft recently revealed it thwarted an unprecedented distributed denial-of-service (DDoS) attack targeting an endpoint in Australia. The attack peaked at 15.72 terabits per second (Tbps), accompanied by nearly 3.64 billion packets per second (pps). This incident marks the largest DDoS attack ever recorded in a cloud environment.

Details of the DDoS Attack

The attack originated from the AISURU botnet, classified under the TurboMirai malware family. Microsoft noted that over 500,000 source IP addresses were involved, indicating a massive coordination of resources. This operation primarily targeted a specific public IP address with high-rate UDP floods.

Contributing Factors

Microsoft’s Sean Whalen stated that the UDP bursts had minimal source spoofing. The usage of random source ports simplified the process of identifying and enforcing provider responses. This meticulous approach facilitated the efficient mitigation of the attack.

Characteristics of the AISURU Botnet

According to data from QiAnXin XLab, AISURU comprises nearly 300,000 compromised IoT devices. Most of these include routers, security cameras, and digital video recorders (DVRs). The botnet is infamous for executing some of the largest DDoS attacks in history.

Attack Attributes: AISURU attacks often focus on online gaming platforms.
Preventive Measures: Operators are reportedly avoiding targets linked to government and national security.
Multi-functional Use: The botnet performs other malicious activities, including credential stuffing and phishing attempts.

Implications for the Future

Microsoft warns that as internet speeds increase and IoT devices become more powerful, the benchmarks for DDoS attack sizes will continue to escalate. The AISURU botnet, alongside others, like TurboMirai’s Eleven11, underscores the ongoing threats posed by compromised devices.

Conclusion

The revelation by Microsoft highlights significant vulnerabilities within the realm of IoT devices. Although some botnets may be dismantled, the potential for future hijackings remains. Addressing these security challenges is vital as the landscape of online threats evolves.