
Akamai Releases First Quarter 2017 State of the Internet / Security Report Mirai DNS Water Torture attacks target the financial services industry, report highlights a 35 percent year-over-year increase in total web application attacks from Q1 2016
Cambridge, MA | May 16, 2017
Akamai Technologies, Inc. (NASDAQ: AKAM), the world's largest and most trusted cloud delivery platform, today released its First Quarter, 2017 State of the Internet / Security Report. The report, using data gathered from the Akamai Intelligent Platform, provides analysis of the current cloud security and threat landscape, as well as insight into attack trends.
Download the latest State of the Internet / Security Report for data, analysis, and graphics at akamai.com/stateoftheinternet-security.
If our analysis of Q1 tells us anything, it's that risks to the Internet and to targeted industry sectors remain and continue to evolve said Martin McKeay, senior security advocate and senior editor, State of the Internet / Security Report. Use cases for botnets like Mirai have continued to advance and change, with attackers increasingly integrating Internet of Things vulnerabilities into the fabric of DDoS botnets and malware. It's short sighted to think of Mirai as the only threat, though. With the release of the source code, any aspect of Mirai could be incorporated into other botnets. Even without adding Mirai's capabilities, there is evidence that botnet families like BillGates, elknot, and XOR have been mutating to take advantage of the changing landscape.
Highlights from Akamai's First Quarter, 2017 State of the Internet / Security Report include:
DDoS Attacks
Mirai DNS Water Torture Attacks, a DNS query flood included in Mirai malware, targeted Akamai customers in the financial services industry. Most of the impacted DNS servers received queries at an even rate during the attacks, except for an attack observed on January 15, 2017 when one of three DNS servers received 14 Mpps of attack traffic. The attacks can create denial of service outages by consuming the target domain's resources in looking up randomly generated domain names in great numbers.
Reflection attacks continued to comprise the largest number of DDoS attack vectors and accounted for 57 percent of all mitigated attacks in Q1 2017, with Simple Service Discovery Protocol (SSDP) reflectors as the biggest source of attacks.
Web Application Attacks
The United States remained the top source country for web application attacks, showing another significant year-over-year increase - up 57 percent from Q1 2016.
The top three attack vectors used against web applications in Q1 of 2017 were SQLi, LFI and XSS.
The Netherlands, in second for the top source of web application attacks of Q1 2017, dropped to 13 percent from 17 percent in the previous quarter, remaining a consistent source of attack traffic and a large proportion of attacks from a country of only 17 million citizens.
Top Attack Vectors
UDP fragment, DNS and NTP maintained their positions as the top three DDoS attack vectors, while reserved protocol floods and connection floods were also on the Q1 2017 attack vectors list.
The Q1 2017 top three most frequent attack vectors per week were ACK, CHARGEN, and DNS.
New reflection attack vector Connectionless Lightweight Directory Access Protocol (CLDAP) was discovered and has been observed producing DDoS attacks comparable to DNS reflection with most attacks exceeding 1 Gbps.
If anything, our analysis of Q4 2016 proves the old axiom expect the unexpected' to be true for the world of web security, continued McKeay. For example, perhaps the attackers in control of Spike felt challenged by Mirai and wanted to be more competitive. If that's the case, the industry should be prepared to see other botnet operators testing the limits of their attack engines, generating ever larger attacks.
A complimentary copy of the Q1 2017 State of the Internet / Security Report is available for download at akamai.com/stateoftheinternet-security. Download individual figures, including associated captions, here.
About Akamai As the world's largest and most trusted cloud delivery platform, Akamai makes it easier for its customers to provide the best and most secure digital experiences on any device, anytime, anywhere. Akamai's massively distributed platform is unparalleled in scale with over 200,000 servers across 130 countries, giving customers superior performance and threat protection. Akamai's portfolio of web and mobile performance, cloud security, enterprise access, and video delivery solutions are supported by exceptional customer service and 24/7 monitoring. To learn why the top financial institutions, e-commerce leaders, media & entertainment providers, and government organizations trust Akamai please visit www.akamai.com, blogs.akamai.com, or @Akamai on Twitter.
Most recent headlines
14/03/2025
BURLINGTON, Mass. Avid has expanded its executive leadership team (ELT) with the appointment of three experienced executives: Tom Sharma as chief technology off...
14/03/2025
CUPERTINO, Calif. TVU Networks, a pioneer in live video production and a leader in cloud-based media solutions, is marking its 20th anniversary at the 2025 NAB ...
13/03/2025
(L-R) Stephanie Suganami, Tatanka Means, John Malkovich, Ayo Edebiri, and Juliette Lewis attend the premiere of Opus at Eccles Theatre in Park City. (Photo by...
13/03/2025
Spotify took center stage at the London Book Fair this week, reaffirming our commitment to the audiobook market and showcasing our impact on the publishing indu...
13/03/2025
At Spotify, we work every day to lift up new voices, giving creators the opportunity to live off their art. Through Spotify Audiobooks, our in-house publishing ...
13/03/2025
Every time airborne law enforcement (ALE) teams fly, they expect their equipment to perform. Whether airborne units are conducting support for ground teams, bor...
13/03/2025
Sunday February 9 saw the annual return of the US' biggest television event, the Super Bowl LIX. Jamie McCombs, Fox Sports Audio Consultant / Sr. Audio capt...
13/03/2025
On Sunday March 2, stars across the film industry gathered at the Dolby Theatre in Los Angeles for the 97th Academy Awards. Production Sound Mixer Paul Sandweis...
13/03/2025
WUPPERTAL, Germany Riedel Communications will feature its new StageLink family of smart edge devices, Smart Audio and Mixing Engine (SAME) and Virtual Smart Pan...
13/03/2025
TAG Video Systems and Harmonic Partner to Deliver Enhanced Real-Time Monitoring ...
13/03/2025
DigitalGlue Invites NAB Visitors to Experience New Features in Managed Storage P...
13/03/2025
FOR-A America Theme - Connecting the Present, Building the Future - Comes to Lif...
13/03/2025
CTIA, the wireless industry association, has named former FCC Chairman Aji Pai as its President and Chief Executive Officer, effective April 1. He replaces Mere...
13/03/2025
he National Association of Broadcasters is urging the FCC to end its investigation of that controversial CBS interview with Kamala Harris stating there is no ...
13/03/2025
MIAMI CBS News & Stations continues to expand its use of augmented and virtual reality technologies with the planned launch of an augmented reality/virtual real...
13/03/2025
Srividhya Srinivasan, co-founder and chief customer success & innovation Officer at Amagi, tells TVBEurope how staying ahead of the latest trends is essential f...
13/03/2025
WASHINGTON FCC Chairman Brendan Carr announced that the agency has launched a massive, new deregulatory initiative that could potentially subject virtually all ...
13/03/2025
SUNNYVALE, Calif. SDVI has announced that it has integrated its Rally media supply chain management platform with the Spectra Vail multi-cloud data management s...
13/03/2025
ATLANTA Gray Media has announced that the Federal Communications Commission (FCC) has granted a waiver of its local ownership rules to permit Gray Media to acqu...
13/03/2025
TV Tech: What do you anticipate will be the most significant technology trends at the 2025 NAB Show?...
13/03/2025
Watch Student Naomi Soleils Folk Pop Performance on The Voice The songwriting major sang Stars by Grace Potter and the Nocturnals during the blind auditions.
...
13/03/2025
Roku Debuts NWSL Zone' Within Roku Sports to Spotlight Live Games, Content Feature marks Rokus first women's league-branded zone within service By Bra...
13/03/2025
Pixels, Images, Video, AI - and Us: A Perspective on AI from NDI Inventor Andrew...
13/03/2025
SVG New Sponsor Spotlight: Lighting Design Group's Steve Brill, Dennis Size ...
13/03/2025
IOC, Comcast NBCU Ink $3B Media-Rights Extension for Olympic Games Through 2036;...
13/03/2025
NCAA March Madness Live Returns with Expanded Availability of MultiView Vertical...
13/03/2025
SVG Sit-Down: Cosm's Devin Poolman on What It Takes To Deliver the Immersive...
13/03/2025
Sky Business, Sky's B2B division, providing connectivity and content to busi...
13/03/2025
Rohde & Schwarz launches R&S NRP140TWG(N) thermal power sensor: A new benchmark ...
13/03/2025
We asked the questions, analysed the answers and now we're excited to share the results of the fifth edition of the ICG Marketing Survey.
Our 2025 survey p...
13/03/2025
SAN JOSE, Calif. - March 13, 2025 Harmonic (NASDAQ: HLIT) today announced a breakthrough in video streaming innovation with the launch of new origin capabilitie...
13/03/2025
Haivision Showcases Mission-Critical Video Solutions at SOF Week 2025
Haivision's video wall systems, ISR technology, and DoDIN APL-certified video distri...
13/03/2025
Company Leads the Way with New Software-Based Production Platform, 12G Switcher,...
13/03/2025
A new Apple Immersive concert experience, Metallica, is coming to Apple Vision Pro this Friday, March 14. Filmed in Mexico City during the sold-out second-year ...
13/03/2025
Here is your host, Patrick Kielty!
Shake your Shamrocks, Patrick Kielty will be...
13/03/2025
This St. Patrick's weekend, RT invites you to celebrate all things Irish, showcasing the very best of Irish sport, entertainment and live coverage from the...
13/03/2025
What's next in AI is at GTC 2025. Not only the technology, but the people and ideas that are pushing AI forward - creating new opportunities, novel solution...
13/03/2025
Facebook
Twitter
LinkedIn
By combining T-Mobile's robust network, Thal...
13/03/2025
Bundle up - GeForce NOW is bringing a flurry of Blizzard titles to its ever-expanding library.
Prepare to weather epic gameplay in the cloud, tackling the genr...
13/03/2025
AI is leveling up the world's most beloved games, as the latest advancements...
13/03/2025
PC game modding is massive, with over 5 billion mods downloaded annually. Mods p...
12/03/2025
O Spotify acaba de lan ar o relat rio Loud & Clear deste ano, uma vis o transpar...
12/03/2025
Spotify acaba de presentar el informe Loud & Clear de este a o, una mirada trans...
12/03/2025
Ramadan, a period of profound spiritual significance for Muslims worldwide, is a time for fasting, prayer, reflection, and community. Enrich your experience thi...
12/03/2025
Spotify has just unveiled this year's Loud & Clear report, a transparent loo...
12/03/2025
More than 70% of FAST programming has been produced since 2010, according to new Gracenote report
NEW YORK March 12, 2025 Gracenote, the content data busin...
12/03/2025
GEONA, Nev. Independent digital and linear advertising rep firm Viamedia will adopt cloud-based ShowSeeker Pilot as its primary ad campaign and order management...
12/03/2025
BRUSSELS Mediagenix has announced that Wael Yasin has joined the company as sales director Central Europe....
12/03/2025
LONDON A new study highlights opportunities for shoppable TV and the massive impact online consumer spending is having on the economy, with Omdia predicting tha...
12/03/2025
CUPERTINO, Calif. Interra Systems has announced that Comcast Technology Solutions has integrated recent updates to BATON Version 9 into its operations....