Google mitigated the largest DDoS attack to date, peaking above 398M rps

Re:Google mitigated the largest DDoS attack to date, peaking... by karaterobot on Tuesday October 10, 2023 @12:15PM (#37834071)

You can (or could, my information is old) pay botnet owners a few hundred bucks to disrupt the servers of people you don't like. An example would be ruining a match for a competing game clan. There's a suprising amount of this kind of petty bullshit going on in the world.

With the Mirai botnet, some of the creators had a DDOS mitigation company as well: they'd sell one party the weapon, and sell another party the defense against that weapon.

Sometimes it's for the street cred, or the lulz, or just the challenge of building a botnet.

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by red-iron-pine on Tuesday October 10, 2023 @12:50PM (#37834509)

Disruption is part of it for sure, but often big, aggressive DDoS come hand-in-hand with other attacks.

Seen it happen with big DDoS on clients. Furaffinity, one of the larger furry webistes, and a constant drama magnet, was a client at a former job. They got DDoS'd hard, and in between scripted DDoS hits they slammed the hell out of their web applications to get vulns and do credential stuffing.

As in blast em, lighten it up just enough to get a ssh or nmap through a few times, blast em again, and repeat until they got in.

Is also why you want out-of-band solution that doesn't touch your infra much.

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by somedude895 on Tuesday October 10, 2023 @04:38PM (#37837166)

> in between scripted DDoS hits they slammed the hell out of their web applications

I've heard this before, but I still don't understand what purpose the DDoS serves here. Distraction, so the actual attack drowns in the noise?

[ Parent | on HN ]