DDoS attacks increase the most in EMEA

Akamai Technologies, provider of web, cloud and security solutions, has presented its new “State of the Internet” report. This shows that the number of DDoS attacks is increasing most rapidly in the EMEA region (Europe, Middle East, Africa).

Under the title: “Always in action against the increasing DDoS threats in EMEA”, the report shows that Germany is the third most affected individual country in the EMEA region, accounting for nine percent of all DDoS attacks. The United Kingdom tops the list with over a quarter of all attacks (26 percent). Saudi Arabia is in second place (22 percent). In 2023, the number of DDoS attacks in EMEA rose to almost 2,500, almost three times the number of all attacks in the Asia-Pacific region including Japan (APJ) and Latin America (LATAM) combined.

The complexity and severity of DDoS attacks have changed due to geopolitical motives – hacktivism and state-sponsored attacks have increased. DDoS attacks are a favorite tool of politically motivated hacktivists and nation-state sponsored attackers. For example, DDoS events have played a significant role in the ongoing cyber war between Ukrainian and Russian actors. Hacktivists were able to use the low-cost attacks effectively.

Other key findings from “Always on the move against the growing DDoS threats in EMEA” are:

• EMEA is the most frequently attacked region: In the first quarter of 2024, EMEA overtook North America as the most frequently attacked region for the first time in five years.
• EMEA is the only region to see a sharp increase in DDoS attacks: since January 2019, the number of DDoS attacks in EMEA has risen continuously, while North America has seen a significant decline since 2022.
• Cyber criminals are expanding their vector portfolio: In more than a third of all DDoS attacks, several – up to twelve – attack vectors are used to improve the chances of success. DNS flood, UDP fragment and NTP reflection were used most frequently.
• The financial services industry is more targeted in EMEA than elsewhere: more than half (53%) of all DDoS attacks in the financial services sector are aimed at targets in EMEA. After EMEA, North America is the second most important target region in the financial services sector with 43%.
• Popular DDoS target DNS: Among the most common types of DDoS attacks are those that target the Domain Name System (DNS). The DNS is a popular target for DDoS attacks due to the impact that malicious traffic can have on this important and essential service.
• DDoS attacks are becoming cheaper and easier to carry out: With the help of DDoS boosters and similar services, which are available for as little as ten euros, it is becoming easier and easier for cyber criminals to paralyze companies and cause financial damage.

Richard Meeus, Director of Security Technology and Strategy, EMEA, at Akamai, said: “Europe is facing an increasing threat from DDoS attacks and the ongoing wars between Russia and Ukraine and between Israel and Hamas are playing a significant role in this. With major events coming up in the region, such as the UK and EU general elections and several major sporting events in the summer, cybercriminals will continue to increase the pressure. It is therefore imperative that companies protect their digital assets and shield their DNS infrastructure to prevent damage.”

(pd/ Akamai)