Aisuru Botnet Drives One-Third of Global DDoS Attacks in 2026

Arelion's 2026 DDoS report reveals that the Aisuru botnet is responsible for approximately 33% of global DDoS attack traffic. The botnet, which utilizes over 500,000 compromised IoT and Android devices, has led to hypervolumetric attacks exceeding 6.1 terabits per second (Tbps). In December 2025, Aisuru peaked at 31.4 Tbps, marking one of the largest DDoS attacks recorded. The attacks primarily target gaming and cloud service providers, with average attack volumes rising significantly. The report indicates a shift towards shorter, more intense attacks, with average durations dropping to 8.9 minutes. The rise of AI-driven botnets and the proliferation of IoT devices have contributed to this new threat landscape. The report also notes ongoing geopolitical motivations behind some attacks, particularly in NATO-aligned nations.

Key Points: • Aisuru botnet accounts for 33% of global DDoS attacks as of 2026. • Peak attack traffic reached 31.4 Tbps in December 2025, one of the largest ever recorded. • Average attack duration has decreased to 8.9 minutes, indicating a trend towards more frequent and intense attacks.