{"id":36198,"date":"2026-05-13T02:14:36","date_gmt":"2026-05-13T02:14:36","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=36198"},"modified":"2026-05-13T02:17:16","modified_gmt":"2026-05-13T02:17:16","slug":"now-released-nsfocus-2025-global-ddos-landscape-report","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/now-released-nsfocus-2025-global-ddos-landscape-report\/","title":{"rendered":"Now Released: NSFOCUS 2025 Global DDoS Landscape Report"},"content":{"rendered":"\n
\n

In 2025, fueled by AI and LLMs, DDoS attacks are shifting from volume-based tactics to intelligent, high-precision warfare. This evolution, marked by increased stealth and a bifurcated ecosystem of veteran and AI-driven actors, is deconstructed in NSFOCUS 2025 Global DDoS Landscape Report<\/em><\/strong>.<\/p>\n<\/div>

\"\"<\/figure><\/div>\n\n\n\n

Key Opinions<\/h2>\n\n\n\n

1. AI-driven DDoS platforms entered active use, exemplified by Nullsec Philippines\u2019 publicizing of vire.cc<\/strong>. By automating optimal strategy generation and parameter configuration, these platforms significantly enhance attack precision and efficiency. As AI continues to lower the barrier to entry, the global threat level is escalating rapidly.<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

2. In 2025, DDoS attacks exceeding 500Gbps<\/strong> surged by 115.72%<\/strong> year-over-year, marking a sharp rise in high-intensity threats. The year’s peak hit 2.6Tbps<\/strong> in May\u2014a significant jump from the 1.9Tbps<\/strong> record in 2024. While the average peak bandwidth rose by approximately 30Gbps<\/strong>, the average peak packet rate actually declined. This divergence indicates that attackers are increasing per-packet data volume<\/strong> to maximize impact\u2014marking a strategic pivot from “high-frequency bursts<\/strong>” to “high-load amplification<\/strong>.”<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>
\n

3. DDoS attacks are evolving toward precision targeting<\/strong>, with tactics refined for maximum impact. Attackers now synchronize strikes with business peaks or product launches<\/strong> to mask malicious traffic, while exploiting geopolitical conflicts and major elections<\/strong> to hit government, finance, and telecom sectors. As AI adoption grows, APIs<\/strong> have emerged as a primary target. A key example is the DeepSeek-R1 incident<\/strong>, where attackers targeted specific API and chat interfaces during peak user hours, demonstrating a highly sophisticated, scenario-based offensive strategy<\/strong>.<\/p>\n<\/div><\/div>\n\n\n\n

4. The DDoS ecosystem remains dominated by veteran families, with XorDDoS (48.99%)<\/strong> and Mirai (31.52%)<\/strong> maintaining a firm lead. However, new threats are rapidly gaining ground. Emerging botnets discovered by NSFOCUS FuYing Lab<\/strong> in 2025\u2014including httpbot, NutsBot, and chachatea<\/strong>\u2014have already broken into the top ten. These newcomers primarily feature HTTP\/HTTPS<\/strong> capabilities, marking a strategic shift from volumetric floods toward session and application-layer resource exhaustion<\/strong>.<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Our Prediction<\/h2>\n\n\n\n

Based on current observations, NSFOCUS predicts two defining trends for the future of DDoS landscape:<\/p>\n\n\n\n