Gcore Radar Report Reveals 150% Surge in DDoS Attacks Year-on-Year

Why It Matters

The acceleration forces enterprises to rethink protection models, demanding faster, globally distributed mitigation to safeguard critical digital services.

Key Takeaways

• DDoS attacks rose 150% YoY, reaching 1.3M incidents.
• Peak traffic hit 12 Tbps, sixfold increase.
• Technology sector faced 34% of attacks.
• Latin America generated 55% of attack sources.
• Network-layer attacks now 82% of incidents, under one minute.

Pulse Analysis

The latest Gcore Radar data underscores a seismic shift in the DDoS threat landscape. Not only have attack volumes more than doubled, but the bandwidth of individual assaults has exploded to 12 terabits per second, dwarfing the 2.2 Tbps levels seen just a year earlier. This escalation reflects broader access to automated tools and the commoditisation of botnet services, making high‑volume attacks affordable for a wider range of threat actors. For businesses, the implication is clear: traditional perimeter defenses are no longer sufficient against bursts that can overwhelm networks in seconds.

Sector‑specific analysis reveals that technology firms are the prime target, absorbing over a third of all incidents, followed closely by financial services and gaming. The concentration of attack origins in Latin America—particularly Mexico and Brazil—highlights a geographic shift driven by regional botnet infrastructures like AISURU. These patterns suggest that attackers are strategically focusing on digitally intensive industries where downtime translates directly into revenue loss and reputational damage, amplifying the business impact of each disruption.

Mitigation strategies must evolve in tandem with the threat. Gcore’s findings advocate for edge‑centric, globally distributed scrubbing capacity that can neutralise traffic close to its source rather than solely at the target’s network edge. Integrating real‑time intent detection, behavioural analytics, and automated response orchestration becomes essential to counter short‑lived, high‑intensity bursts. As DDoS tactics grow more sophisticated, organisations that invest in adaptive, AI‑enhanced security stacks will be better positioned to maintain service continuity and protect their digital assets.