{“lastseen”:”2025-09-25T11:36:34″,”description”:”\\n\\nThe latest Gcore Radar report analyzing attack data from Q1\u2013Q2 2025, reveals a 41% year-on-year increase in total attack volume. The largest attack peaked at 2.2 Tbps, surpassing the 2 Tbps record in late 2024. Attacks are growing not only in scale but in sophistication, with longer durations, multi-layered strategies, and a shift in target industries. Technology now overtakes gaming as the most attacked sector, while the financial services industry continues to face heightened risks.\\n\\n### **Key takeaways: the evolving DDoS landscape**\\n\\nHere are five key insights from the Q1\u2013Q2 2025 Gcore Radar report:\\n\\n 1. **Attack volumes are rising.** Total attacks climbed from **969,000 in H2 2024 to 1.17 million** in H1 2025, a 21% increase over the previous two quarters and 41% YoY growth.\\n 2. **Attack size continues to grow.** The peak attack of 2.2 Tbps demonstrates the increasing scale and destructive potential of modern DDoS campaigns.\\n 3. **Attacks are becoming longer and more sophisticated.** Extended durations and multi-layered tactics allow threat actors to bypass defenses and maximize disruption.\\n 4. **The industries targeted are shifting.** Technology overtakes gaming as the top target, while financial services is being increasingly targeted.\\n 5. **Application-layer attacks are on the rise.** Multi-vector assaults targeting web applications and APIs now account for 38% of total attacks, up from 28% in Q3\u2013Q4 2024.\\n\\n\\n\\n### **DDoS attack frequency has surged**\\n\\nGcore Radar highlights a continued upward trajectory in DDoS activity. Compared to H2 2024, attack volumes rose **21%** , while YoY growth reached **41%** , underscoring a long-term escalation trend. Several factors contribute to this rise:\\n\\n * **Accessible attack tools:** Cheap DDoS-for-hire services empower more threat actors.\\n * **Vulnerable IoT devices:** Unsecured devices are hijacked into large-scale botnets, amplifying attack volumes.\\n * **Geopolitical and economic tensions:** Global instability drives more frequent and targeted attacks.\\n * **Advanced attack techniques:** Multi-vector and application-layer attacks increase both complexity and impact.\\n\\n\\n\\n\\n\\n### **The largest attack reached 2.2 Tbps**\\n\\nThe peak assault in Q1\u2013Q2 2025 hit **2.2 Tbps** , surpassing late 2024’s 2 Tbps attack. While attacks exceeding 1 Tbps remain rare, their frequency is rising, highlighting attackers’ growing ambition to overwhelm networks, applications, and services. Even smaller attacks can incapacitate unprotected systems.\\n\\n\\n\\n### **Industries targeted are shifting**\\n\\n**Technology** now represents **30% of all DDoS attacks** , overtaking gaming (19%). Hosting providers supporting SaaS, e-commerce, gaming, and financial clients are particularly vulnerable, as a single attack can trigger ripple effects across multiple dependent businesses.\\n\\n**Financial services** account for 21% of attacks. Banks and payment systems are prime targets due to high disruption potential, regulatory sensitivity, and ransomware risk.\\n\\n**Gaming** continues to face significant threats, but improved defenses and strategic attacker shifts reduced its share from 34% in H2 2024 to 19% in H1 2025. Key drivers of ongoing attacks include competitive advantage and revenue impact.\\n\\n**Telecommunications** now make up 13% of attacks, reflecting their role as critical internet infrastructure.\\n\\n**Media, entertainment, and retail** see more moderate attack levels, with media at 10% and retail at 5\u20136%.\\n\\n\\n\\n### **Attack duration and tactics**\\n\\nRecent data shows a **shift toward longer, more sustained assaults**. Attacks under 10 minutes decreased by roughly 33%, while 10\u201330 minute attacks nearly quadrupled. Maximum attack duration slightly decreased, from five hours to three, indicating a focus on **concentrated, high-impact campaigns**.\\n\\n**Short bursts remain preferred.** Despite longer attacks gaining prevalence, brief attacks remain highly disruptive, evading automated defenses and often serving as smokescreens for multi-stage cyberattacks.\\n\\n\\n\\n\\n\\n### **Attack vectors**\\n\\nIn terms of network-layer attack vectors, UDP flood attacks remain dominant, accounting for 56% of network-layer attacks, followed by SYN floods (17%), TCP floods (10%), ACK floods (8%), and ICMP (6%). Multi-vector approaches allow attackers to mask malicious activity as legitimate traffic.\\n\\n**ACK flood attacks** continue to rise, now making up 8% of network-layer traffic, highlighting their ability to bypass detection.\\n\\n\\n\\n**Application-layer attack vectors**\\n\\nL7 UDP floods dominate (62%), followed by L7 TCP floods (33%), with other attack types at 5%. Attackers increasingly exploit business logic and APIs to disrupt operations beyond traditional network overload.\\n\\n\\n\\n### **Geographical trends**\\n\\n**The United States and the Netherlands** remain top sources for network-layer attacks. **Hong Kong** emerges as a new significant source, contributing 17% of network-layer and 10% of application-layer attacks. \\n\\nThese findings highlight the need for **proactive, geographically aware defenses**.\\n\\n\\n\\n### **Multi-layered attacks highlight the critical role of WAAP**\\n\\nAttackers are increasingly targeting web applications and APIs, exploiting inventory systems, payment flows, and customer interaction points. These attacks often combine volumetric disruption with manipulation of economic logic, affecting sectors such as e-commerce, logistics, online banking, and public services.\\n\\n### **Gcore DDoS Protection: defending against evolving threats**\\n\\nGcore DDoS Protection leverages **200+ Tbps filtering capacity** across **210+ PoPs worldwide** , neutralizing attacks in real time. Integrated **Web Application and API Protection(WAAP)** combines DDoS mitigation, bot management, and API security to protect critical assets while maintaining performance.\\n\\nDownload the full report.\\n\\nFound this article interesting? This article is a contributed piece from one of our valued partners. Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post.\\n”,”published”:”2025-09-25T10:15:00″,”modified”:”2025-09-25T10:15:00″,”type”:”thn”,”title”:”Tech Overtakes Gaming as Top DDoS Attack Target, New Gcore Radar Report Finds”,”source”:””,”references”:””,”id”:”THN:B21FCB8491AAA262FD206B4D1BEF22F7″,”bulletinFamily”:”info”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/thehackernews.com\/2025\/09\/tech-overtakes-gaming-as-top-ddos.html”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-09-25T11:36:34″,”description”:”\\n\\nThe latest Gcore Radar report analyzing attack data from Q1\u2013Q2 2025, reveals a 41% year-on-year increase in total attack volume. The largest attack peaked at…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,13,33,7,11,43,5],"class_list":["post-18999","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-security","tag-tapic","tag-thn","tag-vulnerability"],"yoast_head":"\n