Microsoft Mitigates Record 15.72 Tbps DDoS Attack Driven by AISURU Botnet
Source The Hacker News
Rated by Threat Radar
Data as of 25 Nov 2025, 07:50 UTC
What to do
AI-suggested
European organizations should implement advanced DDoS detection and mitigation solutions that leverage behavioral analytics and automated traffic filtering to respond rapidly to volumetric attacks. Network operators must collaborate with ISPs to enforce ingress and egress filtering (BCP 38) to reduce IP spoofing and limit botnet effectiveness. IoT device manufacturers and consumers should prioritize secure configuration, timely firmware updates, and network segmentation to reduce device compromise risk. Deployment of network-level rate limiting and geo-fencing can help contain attack traffic from known malicious regions. Organizations should engage in threat intelligence sharing to stay informed about emerging botnet activity and indicators of compromise. Cloud service users should leverage scalable cloud-based DDoS protection services with capacity to absorb multi-terabit attacks. Regular audits of IoT device inventories and vulnerability assessments are critical to identify and remediate weak points. Finally, law enforcement and industry cooperation is essential to disrupt botnet command-and-control infrastructure and reduce the pool of compromised devices.
Description
Microsoft on Monday disclosed that it automatically detected and neutralized a distributed denial-of-service (DDoS) attack targeting a single endpoint in Australia that measured 15.72 terabits per second (Tbps) and nearly 3.64 billion packets per second (pps). The tech giant said it was the largest DDoS attack ever observed in the cloud, and that it originated from a TurboMirai-class Internet of