The mysterious case of the 3 million-toothbrushes DDoS attack — was original report a hypothetical scenario that never happened... or is the truth elsewhere?

Red padlock open on electric circuits network dark red background
(Image credit: Shutterstock/Chor muang)

A tale of three million hacked electric toothbrushes used to launch a DDoS attack has sparked skepticism among cybersecurity experts. The story, which originated from cybersecurity firm Fortinet went viral, raising questions about its authenticity.

Last week, Swiss news site Aargauer Zeitung reported that three million manipulated toothbrushes were involved in a cyberattack. The case, presented by Fortinet, a global cybersecurity leader, quickly gained traction, featuring in international media outlets such as the Independent and Times of India.

However, the story was met with skepticism, with some experts labeling it as "pure fiction" and "an invented example." Others claimed there was no evidence to suggest such an attack ever occurred. Cybersecurity expert Kevin Beaumont even highlighted that the story was being used as propaganda in Russian Telegram chats.

Contradicting statements

Fortinet issued a statement, carried by several media outlets, including BleepingComputer, saying "To clarify, the topic of toothbrushes being used for DDoS attacks was presented during an interview as an illustration of a given type of attack, and it is not based on research from Fortinet or FortiGuard Labs. It appears that due to translations the narrative on this topic has been stretched to the point where hypothetical and actual scenarios are blurred."

However, the following day, the author of the original story at Aargauer Zeitung disputed this, saying, "Fortinet provided specific details: information about how long the attack took down a Swiss company's website; an order of magnitude of how great the damage was. Fortinet did not want to reveal which company it was out of consideration for its customers. The text was submitted to Fortinet for verification before publication. The statement that this was a real case that really happened was not objected to." 

The case of the three million toothbrushes DDoS attack continues to be shrouded in mystery for now, leaving us all wondering exactly where the truth lies.

More from TechRadar Pro

Wayne Williams
Editor

Wayne Williams is a freelancer writing news for TechRadar Pro. He has been writing about computers, technology, and the web for 30 years. In that time he wrote for most of the UK’s PC magazines, and launched, edited and published a number of them too.

Read more
The X logo next to a silhouette of Elon Musk
Who was really behind the massive X cyberattack? Here’s what experts say about Elon Musk’s claims
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Huge cyber attack under way - 2.8 million IPs being used to target VPN devices
An image of network security icons for a network encircling a digital blue earth.
Standing strong against hyper-volumetric DDoS attacks
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Cisco, ASUS, QNAP, and Synology devices hijacked to major botnet
An abstract image of a lock against a digital background, denoting cybersecurity.
Fact vs. fiction: dissecting the improbability of a Zero-Day doomsday scenario
DDoS Attack
World's largest DDoS attack blocked, Cloudflare claims
Latest in Pro
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand
Lock on Laptop Screen
Medusa ransomware is able to disable anti-malware tools, so be on your guard
AI quantization
What is AI quantization?
US flags
US government IT contracts set to be centralized in new Trump order
An abstract image of digital security.
Fake file converters are stealing info, pushing ransomware, FBI warns
Google Gemini AI
Gmail is adding a new Gemini AI tool to help smarten up your work emails
Latest in News
Disney Plus logo with popcorn
You can finally tell Disney+ to stop bugging you about that terrible Marvel show you regret starting
Google Gemini AI
Gemini can now see your screen and judge your tabs
Girl wearing Meta Quest 3 headset interacting with a jungle playset
Latest Meta Quest 3 software beta teases a major design overhaul and VR screen sharing – and I need these updates now
Philips Hue
Philips Hue might be working on a video doorbell, and according to a new report, we just got our first look at it
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand
The Samsung Galaxy S25 Edge on display the January 22, 2025 Galaxy Unpacked event.
A fresh Samsung Galaxy S25 Edge leak hints at a 2K display and a titanium frame