Cloudflare
10 min read

Cloudflare's 2025 Q3 DDoS threat report -- including Aisuru, the apex of botnets

Read Full Article

Summary

Cloudflare's 2025 Q3 DDoS threat report reveals a significant escalation in DDoS attacks, particularly driven by the Aisuru botnet, which has been responsible for unprecedented hyper-volumetric attacks. The report highlights a 54% increase in such attacks compared to the previous quarter, with Aisuru's capabilities allowing it to disrupt major sectors including telecommunications and financial services. The report also notes a surge in DDoS attacks against AI companies, reflecting broader concerns about AI regulation and security. The findings underscore the evolving threat landscape and the necessity for robust DDoS mitigation strategies in the face of increasingly sophisticated attacks.

Key Learnings

  • 1The Aisuru botnet has demonstrated the ability to execute DDoS attacks exceeding 29.7 Tbps, highlighting the need for advanced mitigation strategies.
  • 2DDoS attacks against AI companies surged by 347% in September 2025, indicating a correlation between public sentiment on AI and cyber threats.
  • 3Network-layer DDoS attacks accounted for 71% of total attacks, emphasizing the importance of focusing on this layer for effective defense.
  • 4The report illustrates that short-lived DDoS attacks can cause significant disruption, necessitating rapid response mechanisms.
  • 5Geopolitical events have a direct impact on DDoS attack trends, as seen with increased attacks during protests and trade tensions.

Who Should Read This

Senior Security Engineers analyzing DDoS attack trends and developing advanced mitigation strategies.

Test Your Knowledge

?

What are the implications of the Aisuru botnet's capabilities on the current DDoS mitigation strategies employed by organizations?

?

How do geopolitical events influence the frequency and targets of DDoS attacks as observed in the report?

?

What design decisions should organizations consider when implementing DDoS protection in light of the evolving threat landscape?

?

In what scenarios might traditional DDoS mitigation solutions fail against hyper-volumetric attacks like those from Aisuru?

?

What trade-offs exist between automated DDoS mitigation and manual intervention in response to complex attack patterns?

Topics

Read Full Article at Cloudflare