Technology

This DDoS group just smashed the previous record with a 29.7 Tbps attack

2025-12-04 14:19
511 views
This DDoS group just smashed the previous record with a 29.7 Tbps attack

Aisuru is back on the headlines again, breaking new DDoS records.

  1. Pro
  2. Security
This DDoS group just smashed the previous record with a 29.7 Tbps attack News By Sead Fadilpašić published 4 December 2025

Aisuru is back on the headlines again

Comments (0) ()

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

DDoS attack (Image credit: FrameStockFootages / Shutterstock)
  • Aisuru botnet, with up to 4M IoT devices, launched a record 29.7 Tbps DDoS attack
  • Cloudflare mitigated 1,304 hyper‑volumetric attacks in Q3; targets included telecom, gaming, hosting, and finance
  • Recent victims include Gcore (6 Tbps flood) and Microsoft (largest cloud DDoS at 15.72 Tbps)

The Aisuru botnet, a network of compromised and malicious Internet of Things (IoT) devices, has mounted a record-breaking Distributed Denial of Service (DDoS) attack for the third time in as many months.

Earlier this week, Cloudflare released its 2025 Q3 DDoS threat report, detailing an attack by “the apex of botnets”. In the report, the CDN giant said Aisuru counts anywhere between one and four million infected devices, and that it mounted a DDoS attack that peaked at 29.7 terabits per second (Tbps) and 14.1 billion packets per second (Bpps).

Cloudflare described it as a “UDP carpet-bombing attack bombarding an average of 15K destination ports per second”.

You may like
  • DDoS attack Microsoft says Azure was hit with a massive DDoS attack launched from over 500,000 IP addresses
  • DDoS attack Cloudflare says it has (once again) blocked the largest-ever DDoS attack in history
  • DDoS attack Another massive DDoS attack that reached 1.5 Bpps has been thwarted
Catch the price drop- Get 30% OFF for Enterprise and Business plans

Catch the price drop- Get 30% OFF for Enterprise and Business plans

The Black Friday campaign offers 30% off for Enterprise and Business plans for a 1- or 2-year subscription. It’s valid until December 10th, 2025. Customers must enter the promo code BLACKB2B-30 at checkout to redeem the offer.

View Deal

Thousands of Aisuru attacks

The distributed attack randomized various packet attributes, attempting to work around the defenses, but Cloudflare’s mitigation systems managed to prevent the attack autonomously, the report reads.

The botnet was extremely active, too, averaging 14 hyper-volumetric attacks daily, many of which “routinely exceeded” 1 Tbps and 1 Bpps.

Furthermore, there were 54% more attacks in the third quarter of the year, compared to the second one.

It targeted organizations in different verticals, Cloudflare also stated, including telecommunications providers, gaming companies, hosting providers, and financial services. The botnet was also used to target US internet infrastructure and since it’s offered as a service, virtually anyone can easily disrupt critical infrastructure, healthcare services, emergency services, or even the US military.

Are you a pro? Subscribe to our newsletterContact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

“Since the start of 2025, Cloudflare has already mitigated 2,867 Aisuru attacks,” the report claims. “In the third quarter alone, Cloudflare mitigated 1,304 hyper-volumetric attacks launched by Aisuru.”

In mid-October this year, gaming company Gcore was hit with a “short-burst volumetric flood” lasting between 30 and 45 seconds and peaking at 6Tbps with 5.3 billion packets per second, an attack that was later attributed to Aisuru. A month later, Microsoft announced successfully mitigating “the largest DDoS attack ever observed in the cloud”, which was also attributed to the same botnet.

The attack used more than 500,000 source IPs, across various regions, delivering a multi-vector Distributed Denial of Service (DDoS) attack measuring 15.72 Tbps and nearly 3.64 billion packets per second (pps).

Via BleepingComputer

Best antivirus software headerThe best antivirus for all budgetsOur top picks, based on real-world testing and comparisons

➡️ Read our full guide to the best antivirus1. Best overall:Bitdefender Total Security2. Best for families:Norton 360 with LifeLock3. Best for mobile:McAfee Mobile Security

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.

Sead FadilpašićSocial Links Navigation

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Logout Read more DDoS attack Microsoft says Azure was hit with a massive DDoS attack launched from over 500,000 IP addresses    DDoS attack Cloudflare says it has (once again) blocked the largest-ever DDoS attack in history    DDoS attack Another massive DDoS attack that reached 1.5 Bpps has been thwarted    Abstract image of robots working in an office environment including creating blueprint of robot arm, making a phone call, and typing on a keyboard This devious botnet tried a trial run during the recent AWS outage - so when will it be back?    botnet This dangerous new botnet is shooting off attacks across the world faster than can be tracked - here's what we know about RondoDox    IA y ciberseguridad When AI malware meets DDoS: a new challenge for online resilience    Latest in Security Image depicting hands typing on a keyboard, with phishing hooks holding files, passwords and credit cards. UK cybercrime agency blocks nearly 1 billion access attempts to malicious websites    North Korean flag with a hooded hacker North Korean 'fake worker' scheme caught live on camera    A large neon cybernetic snake coiled up with its tounge out, representing the MuddyWater custom malware, MuddyViper. Iranian hacker group deploys malicious Snake game to target Egyptian and Israeli critical infrastructure    data New data centers will need almost triple the current energy demand by 2035    Security Russian speaking hacking group now shifting focus to government targets    Representational image of a cybercriminal Glassworm returns once again with a third round of VS code attacks    Latest in News Pokémon Legends: Z-A – Mega Dimension Pokémon Legends: Z-A’s DLC is almost here, and the first ‘Z Mega Evolution’ has been confirmed    OpenAI logos Your ChatGPT chats could be less private thanks to a new court ruling    Google Chrome extensions 2025 These are the 10 best Chrome extensions of 2025, according to Google    Back view of a man using a laptop with Windows 11's Microsoft Store app open Latest Windows 11 update fixes some nasty bugs – but don't grab it just yet    The God Slayer Sony reveals new steampunk fantasy RPG The God Slayer for PS5, Xbox, and PC as part of the company's China Hero Project    A screenshot of Homelander staring down at an off-screen Earth in a poster for The Boys season 5 Prime Video releases first explosive posters for The Boys season 5 – and a release date and trailer are going to be next    LATEST ARTICLES