A Brand New Botnet Is Delivering Record-Size DDoS Attacks
1 min read
Summary
Nokia’s Deepfield Emergency Response Team has discovered a new botnet, dubbed Eleven11bot, which is made up of at least 30,000 cameras and video recorders, primarily located in the US.
This is the first time many of the IP addresses have been seen taking part in a distributed denial of service (DDoS) attack.
Eleven11bot is believed to be a variant of the Mirai malware that first appeared in 2016, backpacking unprecedented DDoSes measuring about 1 terabyte per second and taking down the KrebsOnSecurity website for a week.
Security experts commented that the malware is notable for appearing to come out of nowhere, as well as its record-breaking DDoS volumes, surpassing the 5.6Tbps DDoS attack reported in January.
Volumetric DDoS attacks work by consuming all available bandwidth either within the target network or its connection to the internet.
Nokia claimed that the largest attack from the botnet so far peaked at 6.5Tbps.
The discovery comes after the US Homeland Security warned that Russian malware is targeting IoT devices.
