A new DDoS attack leverages a known vulnerability in Universal Plug and Play (UPnP) to get around many of the current defense techniques and swamp a target’s network and servers. Using the UPnP router returns the data on an unexpected UDP port from a spoofed IP address, making it more difficult to take simple action to shut down the traffic flood. The researchers say that the most effective way to stop this attack method is for organizations to lock down their UPp routers, taking a weapon out of the hands of attackers.”]
Source: https://www.darkreading.com/attacks-breaches/new-ddos-attack-method-leverages-upnp