News for hackers. Stuff that matters.

A comment on Someone Has Infected at Least 500,000 Routers All Over the World. Parent comment

Re:Someone Has Infected at Least 500,000 Routers All Over th... by nucleardog on Thursday May 24, 2018 @01:16PM (#17146166)
If we assume each router has, on average, 0.5Mbps upstream (hopefully it's higher!) then that's a combined capacity of ~250Gbps.

Some quick searching says the average DDOS size at one point in 2017 was measured at ~14Gbps and some larger attacks were peaking at ~120Gbps. Cloudflare's "biggest DDOS ever" was 800Gbps.

Even if we assume a lot of these routers are clustered on specific ISPs or networks and the effective capacity will be less, just on sheer bandwidth we're still well into or above the range of some of the larger DDOS attacks.

Whatever way you look at it, I'm sure 500,000 routers is enough to cause some trouble for most people.

[ Parent | on HN ]
Re:Someone Has Infected at Least 500,000 Routers All Over th... by Notre1 on Thursday May 24, 2018 @02:48PM (#17147062)
A lot of DDOS attacks use UDP-based amplification techniques. I know DNS and NTP were frequently used and could get amplification factors of up to 500x. This year there have been some amplification attacked using Memcache that could get 50,000x amplification.
[ Parent | on HN ]