LameDuck’s Skynet Botnet Launched 35,000+ DDoS Attacks

**Executive summary:** LameDuck (aka Anonymous Sudan) is a DDoS-focused threat actor that leveraged a multi-tier botnet (branded Skynet/Godzilla/InfraShutdown) to conduct over 35,000 DDoS attacks against critical infrastructure worldwide, operated DDoS-for-hire and ransom services demanding Bitcoin, used mixed vectors (Layer 7 HTTP floods, TCP direct-path, UDP reflection), and coordinated with other hacktivist groups; the report also provides mitigation recommendations such as always-on DDoS protection, WAFs, rate limiting, and CDN caching.