This is the most powerful botnet ever seen

DDoS Attack
(Image credit: Shutterstock) (Image credit: Shutterstock)

Web security experts Cloudflare have recently spotted a new botnet which it claims is probably the most powerful ever seen. 

Dubbed Mantis, the firm is claiming it evolved from a previously-known botnet - Meris. There are a few things that make Mantis exceptional, according to the researchers. First - it has fewer bots in its network, compared to its counterparts - around 5,000, but it is capable of launching excruciatingly powerful attacks. 

The biggest Distributed Denial of Service (DDoS) attack on record is 26 million generated requests per second (rps), which Cloudflare says it successfully mitigated. To make things even more impressive - the requests were not done via HTTP, but rather HTTPS - a more expensive type of attacks, given that this type of attack needs extra computing power to establish a secure TLS connection. 

Hijacking servers and VMs

"That's an average of 5,200 HTTPS rps per bot," explained Cloudflare product manager Omer Yoachimik. "Generating 26 million HTTP requests is hard enough to do without the extra overhead of establishing a secure connection, but Mantis did it over HTTPS." 

Mantis is able to do this as it doesn’t hijack low-power devices, such as DVRs, or cameras, but rather powerful endpoints - servers, or virtual machines. 

The botnet is also capable of attacking at scale - in the first month of Cloudflare keeping an eye on Mantis, it managed to launch more than 3,000 HTTP DDoS attacks against its customers.

Most of the time, the operators go for internet and telecommunications companies (36%), media and publishing firms (15%), and gaming and finance organizations (12%). The victims are usually located in the United States (20%), although Russian-based firms are also a major target (15%), followed by those in Turkey, France, Poland, Ukraine, the UK, Canada, and China.

Distributed Denial of Service attacks are often used as a distraction, while threat actors conduct more devastating attacks, such as ransomware, or data exfiltration.

Via: The Register

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
DDoS Attack
World's largest DDoS attack blocked, Cloudflare claims
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Another huge new botnet is infecting thousands of webcams and video recorders for DDoS attacks
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Dangerous new botnet targets webcams, routers across the world
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Industrial routers are being hit by zero-days from new Mirai botnets
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Cisco, ASUS, QNAP, and Synology devices hijacked to major botnet
An image of network security icons for a network encircling a digital blue earth.
Standing strong against hyper-volumetric DDoS attacks
Latest in Security
Data Breach
Thousands of healthcare records exposed online, including private patient information
China
Juniper patches security flaws which could have let hackers take over your router
Representational image depecting cybersecurity protection
GitLab has patched a host of worrying security issues
Ai tech, businessman show virtual graphic Global Internet connect Chatgpt Chat with AI, Artificial Intelligence.
AI agents can be hijacked to write and send phishing attacks
China
Volt Typhoon threat group had access to American utility networks for the best part of a year
Abstract image of cyber security in action.
MassJacker malware targets those looking for pirated software
Latest in News
Google Pixel 8a in aloe green showing
Google Pixel 9a benchmark link teases the performance of the upcoming mid-ranger
Quordle on a smartphone held in a hand
Quordle hints and answers for Monday, March 17 (game #1148)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Monday, March 17 (game #379)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Monday, March 17 (game #645)
Apple iPhone 16 Pro HANDS ON
Leaked iPhone 17 dummy units may have given us our best look yet at all four models
A super close up image of the Google Gemini app in the Play Store
It's official: Google Assistant will be retired for phones this year, with Gemini taking over