Description: A DDoS (Distributed Denial of Service) attack is a type of cyber attack that aims to overwhelm a server, service, or network by sending a large volume of traffic from multiple sources. This type of attack is carried out using a network of compromised devices, known as ‘bots’, which are controlled by an attacker. The primary goal of a DDoS attack is to make the targeted service inaccessible to legitimate users, which can result in significant economic losses and damage to the reputation of the affected organization. DDoS attacks can vary in nature and complexity, ranging from simple traffic floods to more sophisticated attacks that exploit specific vulnerabilities in network infrastructure. Protection against DDoS attacks has become a priority for many companies, as the frequency and intensity of these attacks have increased in recent years, driven by the growing reliance on online services and the digitalization of business operations.
History: The concept of DDoS attacks began to take shape in the 1990s when the first denial-of-service attacks were recorded. However, the term ‘DDoS’ became popular in the late 1990s and early 2000s when botnets were used to carry out more complex attacks. One of the most notorious DDoS attacks occurred in 2000 when eBay’s website was attacked, resulting in significant disruption to its operations. Since then, the evolution of technology and increased connectivity have made it easier to carry out DDoS attacks, turning them into a common tool for cybercriminals.
Uses: DDoS attacks are primarily used to disrupt the operation of online services, such as websites, applications, and networks. Attackers may have various motivations, ranging from political activism to economic extortion. Companies can also be targeted by DDoS attacks as part of unfair competition, where one competitor seeks to destabilize another. Additionally, DDoS attacks can be used as a distraction while other malicious activities, such as data theft, are carried out.
Examples: A notable example of a DDoS attack was the 2016 attack on Dyn, which affected numerous online services, including Twitter, Netflix, and Spotify. This attack used a botnet called Mirai, which compromised IoT devices to generate massive traffic. Another case is the attack on GitHub in 2018, which reached traffic of 1.35 Tbps, becoming one of the largest DDoS attacks recorded to date.