From $5 Attacks to Botnet-Powered Platforms: Inside the DDoS-as-a- Service Market
This article reports on the increasing commercialization of Distributed Denial-of-Service (DDoS) attacks, now offered as a ‘DDoS-as-a-Service’ (DDoSaaS) model. The trend shows a shift from fragmented, DIY attack methods to packaged, readily available services, facilitated by underground marketplaces and increasingly sophisticated offerings. Recent activity highlights the growing use of botnets and claims of bypassing security measures like Cloudflare, posing a significant threat to online services.
The report details a growing market for DDoS attacks, moving beyond simple, disruptive tactics to a more formalized and commercially available service. Recent analysis by Flare researchers found a significant evolution in the offerings, moving from scattered scripts and tutorials to polished, packaged DDoSaaS solutions. This shift is driven by the increasing accessibility of botnets and the ability for attackers to leverage them without needing extensive technical expertise. The article highlights examples of these services, such as ‘SatelliteStress’ and ‘Areshun’, which offer varying levels of protection and features, including API access and Cloudflare bypass claims.
Several key players are involved in this market, including Aisuru botnet, which was attributed to a 15.72 Tbps attack on Azure, and the various underground sellers and resellers offering these DDoSaaS services. The trend is particularly concerning because it lowers the barrier to entry for malicious actors, allowing individuals and organizations with limited resources to launch large-scale attacks. The report emphasizes the importance of monitoring dark web forums and marketplaces to identify emerging threats and proactively mitigate risks.