The peak power of DDoS attacks on Russian companies in the first half of the year exceeded 2 Tbit/s, Servicepipe reported. The share of network overloads stronger than 100 Gbit/s increased almost fivefold over the year – from 3% to 15%, and multi-stage scenarios accounted for 42% of all incidents.

Now, an attack often begins with quiet reconnaissance. Attackers use low traffic to search for hidden IP addresses, backup channels, and infrastructure weaknesses, and then strike precisely at them.

The goal is not just to "take down" a website. Attackers can simultaneously overload the network, technical subnets, and application layer: API, payment, personal account, or search. Therefore, the service sometimes formally works, but it is impossible to use it.

Attacks have also become longer: instead of a few minutes, the load can last from 22 to 36 hours. Terabit strikes and application attacks are gradually ceasing to be a rare exception, turning into a common risk for large companies.