A botnet of over 400,000 IoT devices held a 13-day distributed denial-of-service (DDoS) siege against the streaming app of a company in the entertainment business. The attack started around April 24 and hit with as many as 292,000 requests per second (RPS) at its peak, making it one of the largest Layer 7 DDoS strikes. Most of the attacking devices were located in Brazil, the company says in a report today. The attackers used a legitimate user agent as the service’s application and targeted the authentication component.
Source: https://www.bleepingcomputer.com/news/security/streaming-service-suffers-13-day-ddos-siege-by-iot-botnet/