DIGITAL AFTERSHOCKS: COLLATERAL DAMAGE FROM DDoS ATTACKS
DDoS Threat Intelligence Report
Issue 15: Findings from 1H 2025
- 8 Million + DDoS attacks
- Highest throughput attack: 1.5Gpps
- Highest bandwidth attack: 3.12Tbps
- Download the full report for exclusive insights
Download the Report
Explore DDoS attack stats, trends, and impacts.
Key Findings
1
Geopolitical Events Trigger Unprecedented DDoS Campaigns
Major political events drove increased DDoS activity, evidenced by attack count spikes that coincide with these occurrences. These events saw hacktivist groups launching up to double the normal number of attacks in short timeframes.
2
Botnet-Driven Attacks Dominate with Increased Sophistication
Botnet-driven attacks are getting longer, more frequent, and are employing multiple attack vectors to avoid mitigation. They are targeting known vulnerabilities in IoT devices, servers, routers, and more.
3
NoName057(16) Maintains Dominance Among Familiar Threat Actors
Well-known hacktivist and attack groups, such as NoName057(16), are launching more attacks across the globe while leveraging several attack vectors.
4
New Threat Actors Emerge with DDoS-as-a-Service Capabilities
Emerging attack groups like DieNet and Keymous+ are leveraging DDoS-for-hire infrastructure to launch DDoS-as-a-service campaigns, lowering the barrier to entry and expanding the threat landscape.
5
Global DDOS Attack Volume High with Regional Variations
With more than 8 million recorded attacks globally in the first half of 2025, DDoS attack volume remains massive. The attacks also show sustained intensity, reaching speeds of 3.12 Tbps and 1.5 Gpps.
Executive Summary
DDoS attacks are no longer just a nuisance, they’re a weapon of geopolitical influence. In the first half of 2025 alone, more than 8 million attacks were recorded globally, with threat actors leveraging AI, botnets, and DDoS-for-hire services to launch increasingly sophisticated and sustained campaigns.
This latest NETSCOUT DDoS Threat Intelligence Report reveals how:
- Geopolitical flashpoints like the World Economic Forum and the Iran-Israel conflict triggered massive, coordinated DDoS campaigns.
- Hacktivist groups such as NoName057(16) and emerging players like DieNet are exploiting shared infrastructure to scale attacks across industries and borders.
- Botnet-driven attacks are growing in complexity, duration, and impact—averaging 18 minutes and targeting critical infrastructure with multi-vector precision.
- Collateral damage is rising, affecting not just targets but entire service provider ecosystems.
Download the full report to explore detailed threat actor profiles, attack telemetry, and how AI-powered defenses are reshaping the fight against modern DDoS warfare.
Report Highlights
Download the Report
Explore DDoS attack stats, trends, and impacts.