Concurrent attacks against OVH clocked in at 990GBps.
The attack vector is said to be the same Internet-of-Things botnet of 152,464 devices that brought down the website of former Washington Post employee Brian Krebs.
OVH chief technology officer Octave Klaba tweeted that the network was capable of attacks up to 1.5TBps.
|
|
Last days, we got lot of huge DDoS. Here, the list of "bigger that 100Gbps" only. You can see the
— Octave Klaba / Oles (@olesovhcom) September 22, 2016
simultaneous DDoS are close to 1Tbps ! pic.twitter.com/XmlwAU9JZ6
The devices in the botnet were CCTVs and DVRs. These devices have lax security settings and are mostly used in their default state.
Security holes in such devices are very rarely fixed.
+6857 new cameras participated in the DDoS last 48H.
— Octave Klaba / Oles (@olesovhcom) September 26, 2016
Last week's attack on Krebs' website ranged up to 620GBps. It came after he had exposed two Israeli teenagers as being responsible for many of the DDoSs which have been seen over the last few years.
