The record-breaking distributed denial-of-service (DDoS) attack that was recently mitigated by Cloudflare was launched by a new botnet called Mantis, which is now described as "the most powerful botnet to date."
In June 2022, DDoS mitigation firm Cloudflare announced it has mitigated the largest HTTPS DDoS attack that was launched by a botnet they have named Mantis.
The Mantis botnet generated 26 million request per second using approximately 5000 hijacked virtual machines and powerful servers.
Cloudflare reported that the Mantis botnet was able to generate the 26M HTTPS requests per second attack using only 5,000 bots. That is an average of 5,200 HTTPS rps per bot. Generating 26M HTTP requests is hard enough to do without the extra overhead of establishing a secure connection, but Mantis did it over HTTPS.
Experts consider Mantis as the evolution of the Meris botnet, which is composed of MikroTik devices, but Mantis targets a variety of VM platforms and supports running various HTTP proxies to perform the attacks.
Cloudflare, has been tracking Mantis botnet attacks against one thousands of its customers. Over the past month, Mantis was used to launch over 3,000 HTTP DDoS attacks against Cloudflare customers.
Most of the Mantis attacks targeted organizations in the Internet & Telecommunications industry, followed by News, Media & Publishing industry, Gaming and Finance. Most of the targeted organizations are located in the US, followed by Russia-based companies, Turkey, France, Poland, Ukraine, the UK, Germany, Netherlands, and Canada
Mantis is considered by the experts as the most powerful botnet to date.
Image Credits : Noise
