A completely new Botnet is carrying out DDOS attacks with a record size

A newly discovered botnet, including 30,000 webcam and video recorders-with the most focused in the United States-a security researcher inside Nokia, said the most focused in the United States.

Botnet, tracked by Eleven11Bot, initially revealed in late February that researchers in the Nokia Deepfield Emergency Reaction Team saw a large number of geographical IP addresses that offer “overcrowding and bulk attacks”. Eleven11bot has carried out major attacks since then.

Volumetric DDos turn off the service using all existing bandwidth or within the targeted network or connecting it to the Internet. This approach is different from the burnout DDOSS that shows the computational resources of a server too. Hypertension attacks are volumetric DDOS that provide stunning amounts of data, which are typically measured in Tarabits per second.

Johnny-Kom is just setting a new Botnet record

In 30,000 units, the Eleven11Bot was currently great (although some bushes exceed 100,000 units). Nokia researcher Jérôme Meyer told me that many participating IP addresses were never seen to engage in DDOS attacks.

In addition, a 30,000 knot bottomes appear overnight, another highlight of Eleven11Bot is the size of the record that sends its targets. The largest Nokia from the Eleven11Bot has been seen on February 27 and peaked at about 6.5 terabytes per second. The previous record for a volumetric attack was reported in January with 5.6 TBPS.

“Eleven11Bot has targeted a variety of sections, including communications service providers and hosting infrastructure, using a variety of attack vectors,” Mayer wrote. While in some cases the attacks are based on the volume of data, others focus on flooding with data packages more than it can connect, with numbers “several hundred thousand to several hundred million packages per second”. The demolition of the services created in some attacks has lasted several days, some of which continue live since the post.

Failure showed that the highest concentration of IP addresses, with 24.4 %, was located in the United States. Taiwan was 17.7 percent in the next phase and the UK was 6.5 percent.

In the online interview, Mayer stated the following:

• This botnet is much bigger than we’s used to DDos attacks (the only history I have in mind from 2022 attacks just after the Ukrainian attack, in 60k pound robots, but not general).
• The vast majority of its IPs were not involved in DDOS attacks before last week.
• Most IPs are security cameras (Censys think heisilicon, I saw several sources talking to Hikvision NVR as well, so this is a possibility but not my expertise).
• To some extent because the Botnet is larger than the average, the attack size is also greater than the average.