IoT home routers used to launch application-level DDoS attack
Eight brands of IoT home routers were compromised and used to create botnets that launched an application- against a website's multiple servers.
Eight different brands of Internet of Things (IoT) home routers were compromised and used to create botnets that launched an application-level distributed-denial-of-service (DDoS) attack against a website's multiple servers.
The application-level DDoS, or Layer 7 HTTPS flood attack, was discovered by security firm Sucuri. The campaign generated more than 120,000 HTTPS requests per second (RPS) using 47,000 IP addresses, according to a blog post by Securi founder and CTO Daniel Cid. “While we have seen routers being used maliciously in the past, we have never seen them used at this scale,” wrote Cid.
