Mammoth new DDoS attacks harness thousands of Internet of Things devices

A new type of DDoS attack is worrying internet security experts and could have serious ramifications for online gambling sites.

Last week, digital security news portal KrebsOnSecurity was knocked offline for 24 hours after an unknown attacker hit the site with what was believed to be a 620-gigabit-per-second (Gbps) distributed denial of service (DDoS) attack, which would make it the largest DDoS attack on record.

Except these attacks were reportedly followed days later by even larger attacks on a French web host. Octave Klaba, founder and CTO of hosting company OVH, reported that his company was hit by two attacks, the first one reaching an astounding 1.1 terabits-per-second (Tbps).

The common thread linking the OVH and KrebsOnSecurity attacks were the use of a botnet that appeared to harness the power of thousands of Internet of Things (IoT) devices, including security cameras and digital video recorders. Klaba estimated that a full-bore attack by this botnet could reach 1.5 Tbps.