Cloudflare mitigated 18.2 million DDoS attacks in Q3 2026
Attacks rose 208% year over year, but 98% stayed under 1 Gbps and most ended within ten minutes.
58
Malware
Aisuru
- Mentions · 7d3
- Mentions · 30d4
- All mentions7
- First seenAug 12, 2026
- Last mentioned20h ago
Timeline
7 articles · newest firstCloudflare blocked over 8,200 network DDoS attacks an hour in Q3
Most attacks lasted under ten minutes and stayed below 1 Gbps, while terabit-scale floods fell nearly 69% from the prior quarter.
58
Cloudflare: short DDoS bursts rose 208% in Q3 2026
Attacks over 1 Tbps fell to 251 from 805 after takedowns of four large IoT botnets.
46
DDoS attacks can knock services offline before links reach capacity
NETSCOUT logged 9.1 million DDoS attacks in H1 2026, with terabit-scale floods up 1,286%.
62
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
New Kimwolf v7 Android botnet adds HTTP/2 DDoS floods with Chrome fingerprints and takedown-resistant ENS/Tor C2.
55
New Mirai variant adds stealth capabilities to notorious botnet code
FortiGuard Labs reports new Mirai-derived botnet Evooo1Bot actively exploits unpatched routers and edge devices, adding encrypted C2, stealthy SSH scanning, and proxying.
60
Kimwolf v7 Hides DDoS Traffic Behind Chrome Fingerprints and Ethereum
Unit 42 details Kimwolf v7, an Android TV botnet upgrade using HTTP/2 Chrome-fingerprint DDoS floods and Ethereum ENS-based C2 across 1.8M+ infected devices.
55
Related CVEs
by mentions- CVE-2024-36401100%9.8Unauthenticated RCE in OSGeo GeoServer via GeoTools XPath Injection
Appears with
- Kimwolfmalware · 7
- Miraimalware · 5
- Jackskidmalware · 4
- Evooo1Botmalware · 3
- Mossadmalware · 3
- Cloudflarevendor · 3
- Dysphoriamalware · 2
- Cloudforce Oneorganization · 2
- Kimwolf v7product · 1
- Palo Alto Networks Unit 42vendor · 1
- Netgearvendor · 1
- Mitsubishi Electricvendor · 1
- NETSCOUTorganization · 1
- Telesquarevendor · 1
- FortiGuard Labsproduct · 1
- NETSCOUTvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.