In Q1 2021, the number of DDoS attacks dropped by 29% compared to the same period in 2020, but increased by 47% compared to Q4 2020, according to data from Kaspersky DDoS Prevention. However, this growth is explained by an unusual spike in January – that month accounted for 43% of all attacks in the quarter – while the other two months remained quiet.
At the beginning of 2021, many people were still working remotely and spending their leisure time at home. Therefore, cybercriminals conducted DDoS attacks against entities that users need more, for example, telecom providers, so that their clients experienced issues with their internet connection, or online gaming sites. Nevertheless, despite the remaining attention on such resources, statistics show the overall DDoS situation is becoming stable.
Kaspersky experts explain the drop in attacks compared to the same quarter of the last year by the abnormal activity at the beginning of 2020. Because of sudden shift to remote work, corporate VPN gateways and web resources, such as mail or corporate knowledge bases, which were previously available only inside an organization, became a target for DDoS attacks. Within the year, businesses mostly implemented protection for these parts of IT infrastructure. Given this, attacks against these web assets may have become less effective, and the number of DDoS attacks dropped. So, by February and March 2021 the number of attacks returned back to a pre-lockdown benchmark.
January 2021 stands out in terms of the number of DDoS attacks. Statistics from Kaspersky DDoS Intelligence system, that intercepts and analyzes commands received by bots from command and control servers, also showed this spike. For instance, on January 10 and 11, the number of registered attacks exceeded 1,800, and for several days in the month it reached more than 1,500.
“In general, the first quarter of 2021 was rather quiet, apart from surge in DDoS activity in January. That surge might be caused by a fall in cryptocurrency prices that made some malefactors repurpose infected devices in botnets to send junk traffic instead of mining currency. So, despite an overall decline in Q1, we recommend protecting web resources from DDoS attacks. Because, as we can see, cybercriminals driven by financial motives can easily change their tactics depending on the circumstances,” – comments Alexey Kiselev, Business Development Manager on the Kaspersky DDoS Protection team.
Chris Connell, Managing Director, Kaspersky (APAC) remarks, “A reduction in the number of DDoS attacks is definitely good news for companies, however it shouldn’t mean that they can relax their security efforts. A DDoS attack is still a serious threat to businesses, especially in APAC, but an increase in corporate awareness coupled with Internet security software enhancements can help reduce the sheer number of attacks. Companies need to continue their security efforts in order to save themselves from the financial damage caused by DDoS attacks which can be up to a staggering sum of $1.6 million (INR 16 lakhs) according to our research. Money, time, clients and even reputation can be lost in the event of a DDoS attack. Depending on the severity of an attack, resources could be offline for 24 hours, multiple days or even a week, which makes it cardinal for companies to keep their guard up”.
