A warning was issued in the cybersecurity realm due to a surge in DDoS attacks in March 2025, with over 27,000 incidents recorded globally. These attacks, orchestrated by botnets targeting vulnerabilities in servers, routers, and internet-connected devices, are on the rise, leading to more frequent disruptions of websites and online services.
Hacker Group Takes Charge of Worldwide DDoS Attack
The hacker group NoName057(16), noted for its political hacks and online activism, was the most active last month, launching attacks on government websites in Spain, Ukraine, and Taiwan.
They employed techniques such as TCP SYN floods, TCP ACK floods, and HTTP POST/2 requests to sustain attacks for an average of 18 minutes, exceeding the typical duration. Some instances resulted in websites being offline for hours. On March 10th alone, 1,600 attacks were documented within a day.
The report emphasizes that the majority of bots responsible for the increasing digital violence were identified as originating from Mongolia, with collaborative attacks from Germany and the USA. The primary targets were ports 80 and 443, crucial for web traffic and encrypted connections, underscoring the need for immediate protection of both public and private services using real-time solutions and AI technologies.
Experts caution that DDoS attacks are no longer uncommon occurrences but have become regular occurrences, with the threat now being constant.