Neustar: DDoS Attacks Increase 180% in 2019 Compared To 2018
Neustar, Inc., a global information services and technology company and leader in identity resolution, announced that its Security Operations Center (SOC) saw a 168% increase in distributed denial-of-service (DDoS) attacks in Q4 2019, compared with Q4 2018, and a 180% increase overall in 2019 vs. 2018. According to Neustar’s latest cyber threats and trends report, released today, the company saw DDoS attacks across all size categories increase in 2019, with attacks sized 5 Gbps and below seeing the largest growth. These small-scale attacks made up more than three quarters of all attacks the company mitigated on behalf of its customers in 2019.
DDoS attacks taking varied forms
In 2019, the largest threat Neustar mitigated, at 587 gigabits per second (Gbps), was 31% larger than the largest attack of 2018, while the maximum attack intensity observed in 2019, 343 million packets per second (Mpps), was 252% higher than that of the most intense attack seen in 2018. However, despite these higher peaks, the average attack size (12 Gbps) and intensity (3 Mpps) remained consistent year over year. The longest single, uninterrupted attack experienced in 2019 lasted three days, 13 hours and eight minutes.
Though the number of attacks increased significantly across all size categories, small-scale attacks (5 Gbps and below) again saw the largest growth in 2019, continuing the trend from the previous year. The combination of DDoS-for-hire and botnet rental services has made DDoS attacks much easier to execute, but the fact that perpetrators seem to be in many cases choosing to engage in small-scale attacks suggests that their goal may often be something other than taking a site completely offline.
“Large, headline-making DDoS attacks do still take place, but many cybersecurity professionals believe that smaller attacks are being used simply to degrade site performance or as a smokescreen for other forms of cybercrime, such as data theft or network infiltration, which the perpetrator can execute more easily while the target’s security team is busy fighting a DDoS attack,” said Rodney Joffe, senior vice president, senior technologist and fellow at Neustar. “Furthermore, with the current move of the bulk of the workforce globally to a work from home model, we expect to see a significant increase in DDoS attacks against VPN infrastructure. This risk makes an ‘always on’ DDoS mitigation service even more critical.”
In addition to conventional DDoS attacks, which seek to exhaust bandwidth, in 2019 Neustar also observed an increase in network protocol or state exhaustion attacks, which target network infrastructure directly. Volumetric attacks continued to proliferate as well, with attackers using new DDoS vectors such as Apple Remote Management Services, Web Services Dynamic Discovery, Ubiquiti Discovery Protocol and the Constrained Application Protocol.
Said Joffe, “During the shift to teleworking at scale, we would not be surprised to see the VPN protocol ports added to these targeted attacks.”
Two- and three-vector attacks ‘just right’ for attackers
In 2019, approximately 85% of all attacks used two or more threat vectors. That number is comparable to the 2018 figure; however, the number of attacks involving two or three vectors rose from 55% to 70%, with correspondingly fewer simple single-vector attacks and complex four- and five-vector attacks, suggesting that attackers have settled into the Goldilocks zone for attacks.
Security professionals continue to view DDoS attacks as a growing threat. According to the most recent Neustar International Security Council (NISC) survey, when asked which vectors they perceived to be increasing threats during November and December 2019, senior-level cybersecurity decision-makers cited social engineering via email most frequently (59%), followed by DDoS (58%) and ransomware (56%).
Web attacks increasing
2019 saw web attacks on the rise as well. Most companies recognise the danger that slow-loading websites pose to their business and attempt to protect them with web application firewalls. In the most recent NISC survey, 98% of respondents agreed that a WAF was an essential component of their security infrastructure. However, as more and more enterprises use multiple cloud providers, often involving a mix of public and private clouds, the need for consistent security across applications and platforms is growing.
“Web attacks can be difficult to track because some variation in the performance of websites is to be expected, but they are increasingly critical for businesses to address. One survey found 45% of consumers are less likely to make a purchase when they experience a slow loading website, and 37% are less likely to return to a retailer if they experience slow loading pages,” added Joffe.
A vendor-neutral cloud WAF, coupled with DDoS protection, can eliminate a large portion of threats, allowing enterprise application experts to focus their attention on the more specialised attacks. Continuous updates from a reliable threat feed can also deliver information on bad IPs and botnet command and control (C&C) sites before they are able to damage the network.
A complimentary copy of the Neustar 2019: The Year in Review cyber threats and trends report is available here.
Neustar is an information services and technology company and a leader in identity resolution providing the data and technology that enables trusted connections between companies and people at the moments that matter most. Neustar offers industry-leading solutions in Marketing, Risk, Communications, Security and Registry that responsibly connect data on people, devices and locations, continuously corroborated through billions of transactions. Neustar serves more than 8,000 clients worldwide, including 60 of the Fortune 100. Learn how your company can benefit from the power of trusted connections here: https://www.home.neustar.
# # #
Hotwire for Neustar
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Esri Offers Students Free Access to Software for Continued Education Through Coronavirus Closures30.3.2020 16:29:00 EEST | Press release
Esri, the global leader in location intelligence, today announced that it will provide free access to its ArcGIS platform and learning resources through the Learn.ArcGIS.com website to support college and university students who no longer have access to campus computer labs during the COVID-19 outbreak. Students will receive access to ArcGIS Online and over 20 apps including ArcGIS Pro, along with a library of lessons to continue their learning and complete courses. Access is available globally to students ages 18 and over. Learn ArcGIS promotes learning by doing through guided lessons based on real-world problems in industries such as urban planning and disaster response, and new lessons on public health have just been added. Learn ArcGIS lessons cover both beginner and advanced topics and are available in seven languages. “We believe education creates opportunities for people of all ages, while building communities and advancing our knowledge for a better world,” said Jack Dangermond
Aptorum Group Collaborates with Covar Pharmaceuticals To Investigate at Least 3 Repurposed Drug Candidates (SACT-COV19) for Coronavirus Disease 2019 (COVID-19) under Existing Smart-ACT™ Platform and Acticule Infectious Disease Platform30.3.2020 15:00:00 EEST | Press release
Aptorum Group Limited (Nasdaq: APM) ("Aptorum Group"), a biopharmaceutical company focused on the development of novel therapeutics for unmet needs including but not limited to infectious, orphan and metabolic disease areas, today announced that it is initiating an additional research and development project targeting the coronavirus group and has completed initial screening under the Smart-ACT™ platform, a repurposed and new drug discovery platform, to select, out of more than 2,600 approved small drug molecules, at least 3 potential candidates for further preclinical investigation against the new coronavirus disease, COVID-19. Aptorum Group is collaborating with Toronto based Covar Pharmaceuticals and has also entered into agreement with the University of Hong Kong’s Microbiology Department to conduct further preclinical investigation of the selected candidates prior to seeking approval from regulatory agencies to initiate clinical trials on suitable candidates. In particular, Aptoru
Daiichi Sankyo Submits Application for CAR T Therapy Axicabtagene Ciloleucel for Treatment of Patients with Certain Relapsed/Refractory B-cell Lymphomas in Japan30.3.2020 15:00:00 EEST | Press release
Daiichi Sankyo Company, Limited (hereafter, Daiichi Sankyo) today announced that it has submitted a New Drug Application (NDA) to Japan’s Ministry of Health, Labour and Welfare (MHLW) for chimeric antigen receptor (CAR) T cell therapy axicabtagene ciloleucel for the treatment of adult patients with relapsed/refractory diffuse large B-cell lymphoma and related lymphomas. In January 2017, Daiichi Sankyo received exclusive development, manufacturing and commercialization rights for axicabtagene ciloleucel in Japan from California-based Kite, a Gilead Company. The Japan NDA submission is based on previous pivotal trial data conducted globally by Kite for axicabtagene ciloleucel in addition to results from a phase 2 bridging study conducted by Daiichi Sankyo in Japan. Both trials included patients with four aggressive types of relapsed/refractory B-cell lymphomas including diffuse large B cell lymphoma (DLBCL); primary mediastinal B-cell lymphoma (PMBCL); transformed follicular lymphoma (TF
HCL Technologies COVID-19 Status Update30.3.2020 11:40:00 EEST | Press release
HCL Technologies Ltd (HCL) has been monitoring the Covid-19 outbreak since late January and had invoked its Business Continuity Plan and Risk Management Framework quite early to minimize the impact on its employees and clients. The situation arising out of this outbreak and its rapid spread across the world is unprecedented and is extremely dynamic. The economic impact is visible with varying degrees of intensity across multiple countries where we operate. HCL has had a well-defined and structured pandemic policy in place which is resilient, pragmatic and accords paramount importance to employee safety & health and client commitments. We are actively engaged with our clients and have executed the client-specific and HCL internal operations-centric Business Continuity Plan that ensures continuity in delivering to our client and employee commitments. HCL is constantly reviewing the situation at hand with utmost priority and fully complying with all government advisories and recommendatio
GSMA Report Highlights That Mobile Money Accounts Now Exceed One Billion Worldwide30.3.2020 11:00:00 EEST | Press release
The GSMA today unveiled the annual ‘State of the Industry Report on Mobile Money’, offering a view of the mobile money landscape and highlighting the impact that greater financial inclusion has on lives, economies and innovation, especially in emerging markets. This year’s report looks at what one billion registered accounts means for the mobile money industry, mobile money users and the future of the mobile money ecosystem. It provides a comprehensive picture of adoption and usage around the globe. Significantly, the report highlights that 2019 marked a major milestone for the mobile money industry, with over one billion registered accounts and close to two billion dollars in daily transactions. For the first time, digital transactions represented the majority, 57 per cent, of mobile money interactions. The industry is witnessing increasing user trust and relevance. With 290 live services in 95 countries and 372 million active accounts, mobile money is entering the mainstream and beco
Rewired Targets Growth-Stage AI Ventures30.3.2020 10:00:00 EEST | Press release
Rewired, the robotics focused venture studio that invests in growth-stage technology ventures, is seeking to add new artificial intelligence and robotics investments to its portfolio. The portfolio currently encompasses innovations in machine learning, robotics, bionics, smart sensors, mapping and localization in the UK and USA. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20200330005016/en/ Backed by investors who believe that analysts are underestimating the prospects of AI, Rewired seeks to make investments of between $5m and $30m. Its status as a venture studio means that Rewired uniquely seeks to attain a substantial or majority position as an investor, and to then provide long term funding and expertise. The Rewired approach is to alleviate founders from the burden of constant fundraising so they can focus on growth, whilst avoiding the dilution that VC’s typically accept during multiple funding rounds. Rewired is seek
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.Visit our pressroom