Particle.news
Download on the App Store

Microsoft Says Azure Neutralized Record 15.72 Tbps Cloud DDoS Tied to Aisuru Botnet

Microsoft attributes the surge to the Aisuru IoT botnet using more than 500,000 real‑source IPs in high‑rate UDP bursts.

Overview

  • On October 24, 2025, Azure DDoS Protection automatically detected and mitigated a multi‑vector flood peaking at 15.72 Tbps and nearly 3.64 billion packets per second against a single endpoint in Australia.
  • Microsoft reports no customer workloads were interrupted as malicious traffic was filtered and redirected across its global protection network.
  • The assault relied on largely non‑spoofed UDP traffic with randomized source ports from over 500,000 IP addresses, which eased traceback and provider enforcement.
  • Aisuru is a Turbo Mirai–class IoT botnet built from compromised home routers and cameras on residential ISP networks, and security firms have linked it to repeated record‑scale campaigns.
  • Researchers also tied Aisuru to Cloudflare’s 22.2 Tbps event in September and to recent 20+ Tbps barrages against gaming and broadband targets, prompting renewed guidance to verify DDoS protections heading into the holiday period.