India has emerged as the top destination for origination of distributed denial of service (DDoS) cyber attacks, accounting for 26 percent of such attacks on gaming, software and media sectors, security solutions firm Symantec today said. Also Read - Dark Web Alert! Domino's India data of 180 million orders leaked online
Cyber criminals use DDoS attacks to disrupt sites by bombarding them with traffic from multiple sources, resulting in online service becoming unavailable for a period of time. Other countries in the list include the US (17 percent), Singapore, Vietnam and China. Also Read - Air India server hacked, personal data of 45 lakh passengers leaked in massive cyber attack
“The sources for DoS attacks are often countries that have a high number of bot infected machines and a low adoption rate of filtering of spoofed packets,” Symantec India Director Technology Sales Tarun Kaura told PTI. Also Read - COVID-19 themed cyber-attack surge by 114 percent in Q4 2020: McAfee
He explained further this does not mean that people behind the attack are located in India since the attacks are often orchestrated remotely.
“However, it is a reflection of India emerging as a hotbed to launch these attacks, potentially because of the low cyber security awareness, lack of adequate security practices and infrastructure,” he said.
Symantec’s report includes global data collected between January to August this year. The report found that DDoS services are available for hire for less than $5 (Rs 300) to perform the attacks for a few minutes against any target.
“Longer attacks can be bought for larger prices. They also offer monthly subscription services, often used by gamers to take down competitors,” Kaura said.
He added that the gaming industry experienced nearly 46 percent of attacks, followed by software and media sectors.
“While it’s not happening on a broad scale now, it is likely that we will see an increase in DDoS attacks originating from mobile and Internet of Things devices in the future as well,” he said.
Asked about the motivation behind such attacks, Kaura said financial blackmail and competition were among some of the reasons behind the attacks. “Many are also using DDoS as a diversion technique to distract IT security response teams while a targeted attack is conducted,” he added.