“The threat actor behind the campaign leveraged multiple types of compromised devices, which included a large number of Asus home routers, Mikrotik systems, DVRs, and web servers.”
The record attack hit 3.8 terabits per second for 65 seconds, part of a month of more than 100 floods at financial, internet and telecom targets. The firepower came from Asus home routers, Mikrotik boxes and DVRs that nobody patched. Akamai found 58,000 more systems open to abuse through the new CUPS bugs. Router vendors ship the weapons and Cloudflare sells the shield.