Kaspersky Digital Footprint Intelligence (DFI) reports that brokered DDoS attacks are priced ranging from $30 to $2,000
In a recent study, Kaspersky Digital Footprint Intelligence (DFI) experts analyzed over 256,000 DDoS-related posts on the darknet. They focuses on service offerings, pricing models, market competition, and behavioral patterns of DDoS actors. They have identified 148 active DDoS suppliers since at least 2024.
Three main DDoS attack models include brokered attacks, where a third party executes the attack; DDoS-as-a-Service, which allows users to subscribe to attack tools; and in-house infrastructure, where actors deploy their own scripts or botnets. Of brokered actors, 65% advertised on cybercriminal forums, while 35% utilized Telegram and Discord.
The research indicates that DDoS attacks are primarily categorized into network-layer and application-layer types. Kaspersky DFI analysis shows 74% of actors promoted L4 techniques like TCP, UDP, and DNS floods, while only 9% mentioned standalone L3 methods. L7 attacks were most prevalent, found in 92% of cases, highlighting the accessibility of tools and the ease of targeting web services.
“DDoS attacks have become a more practical and accessible option for threat actors, largely because these services are cheap and easy to obtain. In some cases, the cost of launching an attack can be lower than a standard monthly streaming subscription, or even for a price of a cup of coffee. For businesses, this means DDoS readiness should be part of basic cybersecurity planning. It is equally important to understand the market behind these attacks, since stronger defense begins with a clearer understanding of the threat environment.”
João Pedro Brandão e Silva, Kaspersky Digital Footprint Intelligence analyst
To strengthen the protection of your business, Kaspersky recommends the following:
- Adopt a comprehensive digital risk protection service that monitors organizations’ digital assets and detects threats across the surface, deep and dark web such as Kaspersky Digital Footprint Intelligence.
- Provide your InfoSec professionals with an in-depth visibility into cyberthreats targeting your organization. The latest Kaspersky Threat Intelligence provides them with rich and meaningful context across the entire incident management cycle and helps them identify cyber risks in a timely manner.
- Keep your employees informed about relevant threats. Kaspersky Automated Security Awareness Platform helps cultivate cyber-savvy behavior, including safe downloading practices.
- Augment existing security controls with human-led detection and global threat intelligence through solutions like Kaspersky Managed Detection and Response (MDR), which offers 24/7 monitoring, detection, investigation and rapid response to sophisticated cyberattacks.