Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique

Researchers report that the CatDDoS Mirai-derived botnet has actively exploited more than 80 known vulnerabilities across numerous vendors to conscript routers and networking devices into DDoS campaigns (with observed daily targeting exceeding 300 devices), and that leaked/sold source code has spawned multiple near-identical variants; the report also describes DNSBomb (CVE-2024-33655), a DNS pulsing/PDoS technique capable of very high amplification (~20,000x) that abuses resolver behavior and was disclosed at IEEE S&P.