DDoS attacks surged in both volume and intensity during the second half of 2024, according to a new report from cybersecurity firm Gcore.

The data reveals a 56% year-over-year increase compared to H2 2023, along with a 17% rise from H1 2024. Researchers highlighted this as part of a steep long-term growth trend in DDoS activity.

The surge has been fueled by multiple factors. Poorly secured IoT devices continue to be exploited to create massive botnets, enabling attackers to scale their attacks. Additionally, geopolitical tensions have driven an increase in targeted attacks on critical infrastructure, with hacktivist and nation-state groups leveraging DDoS as a disruptive weapon.

“Not only is the number and intensity of attacks increasing, but attackers are expanding the scope of their attacks to reach an increasingly wide range of sectors.”

H2 2024 saw a shift toward shorter but more intense attacks. The largest recorded DDoS attack during this period peaked at 2Tbps, an 18% increase from H1 2024. Meanwhile, the longest attack lasted five hours, a significant drop from 16 hours in the first half of the year.

Researchers suggest these “burst attacks” are partly a response to improved cybersecurity defenses. Short-duration attacks are harder to detect, as they can blend in with normal traffic spikes. Attackers may also use these quick strikes as a smokescreen to conceal secondary threats, such as ransomware deployment.

Tech Sector Faces Growing DDoS Threat

The technology sector saw a dramatic spike in DDoS activity in H2 2024, with attacks rising from 7% to 19% year-over-year. Cybercriminals increasingly target tech services due to their widespread impact, as countless organisations rely on them for daily operations.

One of the most high-profile incidents occurred in July 2024, when a DDoS attack on Microsoft triggered a 10-hour outage across multiple platforms. The disruption affected banks, courts, and utility services, highlighting the ripple effect of such attacks. Additionally, cybercriminals can exploit the computational power of technology platforms to intensify their assaults.

Recommended reading

• ‘Big Game’ Ransomware Tactics Drives Spike in Attacks
• UK Proposes Ban on Public Sector Ransomware Payments
• Ransomware Payouts Plummet by £350M in 2024

Financial services saw the sharpest rise in DDoS attacks, with incidents soaring 117% from H1 2024. This sector accounted for 26% of all DDoS attacks in H2, as cybercriminals increasingly use DDoS extortion tactics against financial institutions, leveraging the high financial and reputational costs of downtime.

Despite a 34% share of total DDoS attacks, the gaming industry actually saw a 31% decline in attacks compared to H1 2024. This suggests a shift in attacker focus toward higher-value targets, such as technology and financial services.

As DDoS attacks continue to evolve in scale and strategy, organisations across multiple sectors must remain vigilant in strengthening their defenses.