- A new cyber-security report has revealed a significant increase in the scale and sophistication of distributed denial-of-service
- The findings come from a threat intelligence report released by NETSCOUT
- According to the report, attackers are collaborating and exploiting compromised Internet-of-Things devices
A new cyber-security report has revealed a significant increase in the scale and sophistication of distributed denial-of-service (DDoS) attacks worldwide, with more than eight million incidents recorded in the second half of 2025 alone.
The findings come from a threat intelligence report released by NETSCOUT, which warns the industry of the growing use of artificial intelligence, coordinated botnets and hacktivist groups pushing the increase.
According to the report, attackers are collaborating and exploiting compromised Internet-of-Things (IoT) devices to generate enormous volumes of traffic capable of overwhelming digital infrastructure.
Some attacks reached sizes of up to 30 terabits per second, far exceeding many traditional defence capabilities.
The report recorded more than eight million DDoS attacks across 203 countries and territories, highlighting the global reach of the threat.
Researchers found that around 42 per cent of attacks used multiple techniques simultaneously, typically combining two to five different attack vectors. In some cases, attackers altered their methods during an attack to evade detection systems.
Broadband and mobile providers were also found to be at risk. Essential internet services such as Network Time Protocol (NTP) and Domain Name System (DNS) servers continue to face sustained targeting, with attackers seeking to disrupt key infrastructure supporting government, finance and transportation networks.
One notable surge occurred in July 2025, when researchers recorded more than 20,000 botnet-driven attacks in a single wave, illustrating how coordinated cyber campaigns can rapidly overwhelm security defences.
NETSCOUT said its analysis is based on direct observation of internet traffic across its monitoring network. The company reports protecting roughly two-thirds of the global routed IPv4 address space, covering thousands of networks and hundreds of industry sectors.
During the second half of 2025, the company’s monitoring systems recorded peak global traffic levels exceeding 800 terabits per second while tracking tens of thousands of daily DDoS incidents.
