DDoS Attacks a 'Constant Threat' in Europe

The sheer volume and intensity of DDoS attacks across Europe surged in 2025, with a 75% increase in the number of incidents compared to the previous year. Terabit-scale attacks are now common, with the largest peaking at 1.33 Tbps, delivering over 120 million packets per second. These are not fleeting disruptions; the nature of these attacks has shifted towards prolonged campaigns. The longest single attack in 2025 lasted for more than eight consecutive days, and on average, systems were under active assault on 322 days of the year. The gaming and gambling industry is a primary target for HTTP DDoS attacks. The motivation is often direct financial or competitive gain, with attackers aiming to disrupt operations long enough to alter betting outcomes. Beyond extortion, these attacks can also serve as a smokescreen for more severe intrusions like data theft or malware deployment. Hacktivism, often linked to geopolitical events, is a significant driver of this trend. Pro-Russian groups like NoName057(16) have been explicitly linked to campaigns targeting European government and financial services, using DDoS as a tool for disruption. The accessibility of DDoS-for-hire services, with attacks available for as little as ten euros, has lowered the barrier to entry for malicious actors. In response, international law enforcement, through initiatives like Operation PowerOFF, is actively working to dismantle these illegal platforms across Europe. The probability of a repeat attack is high, with over 70% of organizations hit once being targeted again. On average, an initial incident is followed by 2.8 subsequent attacks, an 80% increase from the previous year, signaling a shift from one-off events to a persistent strategic threat.