Cameras, IoT Devices Part of Massive DDoS on Krebs Security

KrebsonSecurity.com was taken offline beginning September 20 by a massive DDoS that peaked at over 600 Gbps and persisted for more than two days; attackers used a GET-flood sourced from a botnet of compromised IoT devices (including cameras and SOHO routers), and mitigation by Akamai and Prolexic was strained—Akamai ultimately stopped hosting the site due to the cost of deflection. The incident highlights growing IoT-driven botnet risks and the high cost and difficulty of defending smaller independent sites against very large, sustained DDoS attacks.