#Cybersecurity #Luxembourg #DDoS Attacks #Gcore Radar

Gcore Radar Report: Escalating DDoS Attacks

Gcore, a prominent global provider of AI, cloud, network, and security solutions, has released its findings from the Q3-Q4 2025 Gcore Radar report, which highlights a concerning trend in DDoS (Distributed Denial of Service) attacks. The report reveals a dramatic 150% year-on-year surge in attack volumes, reflecting an evolving threat landscape characterized by increased attack frequency, sophistication, and diversification.

Key Findings Overview

The total number of DDoS attacks witnessed a substantial jump from 512,000 in Q4 2024 to 1.3 million in Q4 2025. This spike underscores the reality that DDoS activity is transitioning into a new phase of extensive and frequent executions. Among the most alarming statistics presented in the report, the total attack volumes reached an astonishing 12 terabits per second (Tbps) in Q4 2025, a sixfold increase compared to the previous year. This surge illustrates a significant leap in both the capability and ambition of cybercriminal actions.

Approximately 75% of network-layer attacks lasted less than one minute, demonstrating the trend towards shorter, yet highly intense, operations designed to overwhelm targets rapidly. Conversely, application-layer attacks showcased a shift with a rise in longer duration attacks—64% of assaults exceeded ten minutes.

The report identifies technology as the most frequently targeted sector, accounting for 34% of all attacks, followed closely by financial services at 20% and gaming at 19%. Understanding the type of sectors under threat is crucial, whereby availability is critical and disruption yields immediate operational and financial repercussions.

Geographic Patterns in Attacks

Geographical analysis indicates a concentration of attack origins in Latin America, particularly Mexico and Brazil, which together contributed to 55% of observed DDoS activity. Within the U.S., notable incidents are also prevalent, especially concerning application-layer attacks across the nation.

As per Andrey Slastenov, Gcore's Head of Security, the findings act as a wake-up call for various industries. The accessibility and reduced costs associated with orchestrating DDoS attacks have broadened the pool of potential attackers, extending risk exposure even to entities that previously deemed themselves safe. Organizations are urged to adopt comprehensive defense mechanisms capable of recognizing intent, analyzing behavior patterns, and promptly responding across various attack surfaces.

Shifts in Attack Techniques and Trends

The report sheds light on how broader access to attack methodologies, along with an expanding insecure IoT landscape, geopolitical instability, and advanced attack techniques, have driven the surge in DDoS incidents.

Network-layer attacks: These attacks accounted for a remarkable 82% of all incidents, reflecting their cost-effectiveness and ease of execution, facilitating disruption by opportunistic attackers.
Attack Duration Trends: Data points suggest that most attacks are now more intensely focused in brief bursts rather than prolonged engagements, with two-thirds of attacks lasting under a minute while traditional methodical strategies are conversely taking on longer durations.
* Automation in Attacks: There is an observable shift towards increased automation, enabling cybercriminals to conduct large-scale campaigns more efficiently than in past years.

Recommendations for Organizations

In light of these unsettling trends, organizations across sectors must elevate their security postures significantly. Effective protection involves not just reactive measures but proactive preparedness against the increasing intricacies of these digital threats. This includes investing in advanced threat intelligence capabilities, enhancing detection methods, and establishing robust incident response strategies.

Mitigating attacks closer to their origin rather than at the target is crucial. To adequately counter these ever-evolving threats, a globally distributed response network is essential—comprising regions of high activity and attack origins.

For comprehensive insights, users are invited to explore the full Gcore Radar report available at Gcore Resources.

About Gcore

Gcore stands out as a global leader in providing infrastructure and software solutions, dedicated to AI, cloud compute, networking, and security landscapes. The company is headquartered in Luxembourg and boasts a presence across six continents, ensuring reliable and compliant performance for essential workloads. By merging AI technologies with integrated computing solutions, Gcore aims to power organizations in fully realizing their digital transformation journeys.