Threat Landscape

A lesson in carpet bombing and sophisticated resource management

• Lisa Fröhlich
• April 30, 2025

A lesson in carpet bombing and sophisticated resource management Sometimes attacks on the internet appear to be precision strikes Small groups with clear goals, focused on a single victim And sometimes an attack is more like a wildfire: random and unstoppable The attack we investigated this month falls into neither category It was a mixture […]

Threat Landscape

When the Full Arsenal of DDoS Attacks is Used

• Lisa Fröhlich
• March 26, 2025

A recently documented DDoS attack on the Link11 network has revealed a new level of complexity in today’s attacks. In particular, it highlighted the increasing sophistication of cyberattacks and the need to continually adapt defenses. The attack: a complex interplay of DDoS methods The attack was a complex interplay of DDoS methods and what makes […]

Threat Landscape

The emergence of a SuperBot – Are we facing a new era of cyberattacks?

• Jag Bains
• March 11, 2025

In a recent development, massive botnets have emerged, delivering unprecedented Distributed Denial-of-Service (DDoS) attacks, as described in this Ars Technica article. At Link11 we have seen and mitigated several attacks that are leveraging these types of botnets, with differing techniques and vectors but with the common characteristic of having massive capacity and scale. Understanding Botnets […]

Threat Landscape

Web DDoS attack with high packet rate – TCP takes down website

• Lisa Fröhlich
• February 21, 2025

A recent Web DDoS attack registered in the Link11 network clearly shows how high the load on an attacked website can be. The attack was an application layer attack with a high number of packets per second. The cyberattack not only reached a packet rate of 45 million packets per second, but also had an […]

Threat Landscape

Vulnerability in ChatGPT’s crawler: How it can be exploited

• Lisa Fröhlich
• January 24, 2025

A recently discovered vulnerability in ChatGPT’s crawler could be used by attackers to launch Distributed Denial-of-Service (DDoS) attacks against any website. The problem lies in the way the ChatGPT API endpoint processes certain requests and then sends multiple requests in parallel to external websites. The underlying vulnerability has not been acknowledged or fixed by either […]

Threat Landscape

The dark side of digital progress: Why software security remains a perennial issue

• Lisa Fröhlich
• September 10, 2024

Even if we’re not explicitly aware, software and applications have become an essential part of our digital lifeblood. Whether it’s online shopping, work, or communication, almost everything we do depends on software. But behind this digital facade lurk dangers that are often underestimated. The security of our software is a complex issue that goes far […]

Threat Landscape

How artificial intelligence is changing DDoS attacks

• Jag Bains
• December 20, 2023

The DDoS landscape is constantly evolving. Cybercriminals are well aware of the latest technological developments and use them to their advantage. The emergence of Artificial Intelligence (AI) in the cybercrime space is no exception, and it presents completely new challenges to organizations and companies that find themselves in the crosshairs of these attackers. DDoS attacks […]

Threat Landscape

DDoSia: Attack tool with explosive growth

• Fabian Sinner
• November 15, 2023

The term DDoSia was first mentioned in October 2022, when the pro-Russian hacker group, NoName057(16), confirmed the existence of the new DDoS project on the social network Telegram. The project itself is considered the successor to the former Bobik botnet that was successfully combated and disbanded in September 2022. Since then, DDoSia has grown significantly […]

Threat Landscape

Zero-day vulnerability in HTTP/2 protocol: How to protect yourself effectively

• Lisa Fröhlich
• November 9, 2023

Zero-day vulnerabilities are vulnerabilities in software, operating systems, or protocols that have not yet been identified or fixed by the developers or vendors. The term “zero-day” refers to the fact that developers have no chance to patch the issue before it’s discovered, as the exploitation is typically the first notification they have. These exploits are […]

Threat Landscape

Black Friday 2022: Calmer seas, but dangers still lurk in cyberspace

• Lisa Fröhlich
• December 23, 2022

Since the popular shopping event began in the USA, Black Friday has spread all over the world. The popular shopping day originated in Philadelphia in the 1950s. On the day after Thanksgiving, there was huge traffic chaos as part of the annual football game between the Army and Navy. However, many spectators used the day […]

Press

Threat Landscape

New Link11 DDoS Report for 2021

• Fabian Sinner
• March 9, 2022

The fight against the Hydra – Complexity and number of attacks increased again! DDoS Report from Link11: Year-on-year comparison 2020/21: Increase of DDoS attacks in the international Link11 network by 41 percent. Highest attack reached around 4.5 Tbps. Average attack bandwidth peak nearly tripled – from 161 Gbps to 437 Gbps. Over the last few […]

Threat Landscape

Valentine’s Day: DDoS Attackers to Threaten Online Retailers

• Fabian Sinner
• February 7, 2022

Valentine's Day has become an important sales driver for retailers. Cybercriminals could spoil their business with DDoS attacks.