New DDoS Attacks Could Reach Tens Of Terabits-Per-Second

Network security firm Corero warned that the distributed denial-of-service (DDoS) threat landscape is evolving and could reach tens of terabits-per-second in size, after discovering a new zero-day attack vector that can amplify DDoS attacks by as much as 55x.

Corero said this new type of attack uses the Lightweight Directory Access Protocol (LDAP) and if combined with a Internet of Things botnet, could break records in DDoS power. The threat has loomed large particularly after the 655-Gigabyte attack on KrebsOnSecurity and subsequent discovery of the Mirai botnet, Corero said.

"LDAP is not the first, and will not be the last, protocol or service to be exploited in this fashion. Novel amplification attacks like this occur because there are so many open services on the Internet that will respond to spoofed record queries," said Corero's Dave Larson.

Read more on Corero's site.