Quick Summary
The Aisuru botnet executed a record-breaking DDoS attack peaking at 31.4 Tbps and 200 million requests per second, targeting telecommunications companies. This attack, detected by Cloudflare on December 19, 2025, is part of a campaign that has previously set records, including a 29.7 Tbps attack. The scale of this attack highlights the growing threat of DDoS incidents, particularly against critical infrastructure in the telecommunications sector.
The Securityish Brief
The Aisuru/Kimwolf botnet has set a new record with a massive distributed denial of service (DDoS) attack that peaked at 31.4 Tbps and 200 million requests per second. This unprecedented attack targeted multiple companies, primarily in the telecommunications sector, and was detected and mitigated by Cloudflare on December 19, 2025. The attack is part of a broader campaign characterized by hyper-volumetric HTTP DDoS attacks, which Cloudflare referred to as ‘The Night Before Christmas.’
Cloudflare’s report indicates that over half of the attacks in this campaign lasted between one and two minutes, with 90% peaking between 1-5 Tbps. The Aisuru botnet has previously held the record for a 29.7 Tbps attack and was also linked to a 15.72 Tbps incident involving 500,000 IP addresses. The power of the Aisuru botnet comes from compromised IoT devices and routers, with the latest attack sources identified as Android TVs.
In 2025, Cloudflare recorded a 121% increase in DDoS attacks compared to 2024, totaling 47.1 million incidents. During this period, the most targeted industries included telecommunications, IT services, gambling, and gaming. The largest sources of these attacks were identified as Bangladesh, Ecuador, and Indonesia, with significant targeting of organizations in China, Hong Kong, Germany, Brazil, and the United States.
Cloudflare’s findings also revealed a 600% increase in network-layer attacks exceeding 100 Mpps and a 65% quarter-over-quarter increase in attacks larger than 1 Tbps. Notably, over 71.5% of all recorded HTTP DDoS attacks were attributed to known botnets, underscoring the persistent threat posed by these malicious networks.
Key Takeaways
- Monitor your network for unusual traffic patterns that may indicate a DDoS attack.
- Ensure your cybersecurity measures are updated to mitigate potential DDoS threats.
- Consider implementing rate limiting on your web applications to manage incoming requests.
- Engage with a DDoS protection service to enhance your defense against large-scale attacks.
- Educate your team about the signs of DDoS attacks to improve response times.
Key Terms & Concepts
- DDoS Attack: In this article, a DDoS attack refers to an attempt to disrupt the normal functioning of a targeted server, service, or network by overwhelming it with a flood of internet traffic.
- Aisuru Botnet: The Aisuru botnet is a network of compromised devices used to launch large-scale DDoS attacks.
- HTTP DDoS Attack: An HTTP DDoS attack targets web applications by overwhelming them with HTTP requests.
- Network-layer Attack: A network-layer attack aims to disrupt the communication between devices on a network, often by flooding it with excessive traffic.
Read the original article here: https://www.bleepingcomputer.com/news/security/aisuru-botnet-sets-new-record-with-314-tbps-ddos-attack/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
