
Q3 2017 Akamai State of the Internet / Security Report Reveals Significant Increase in Web Application Security Attacks, Evolution of Attacker Strategies Holiday shopping season may see new attack types leveraging IoT devices, mobile platforms
Cambridge, MA | November 28, 2017
Newly released data shows that web application attacks continued to rise significantly in both the quarter-over-quarter and year-over-year timeframes, according to the Third Quarter, 2017 State of the Internet / Security Report released by Akamai Technologies, Inc. (NASDAQ: AKAM). In addition, further evaluation of the Mirai botnet and WireX malware attacks suggests that attackers may leverage IoT and Android devices to build future botnet armies.
The report found that the number of web application attacks last quarter (Q3 2017) increased 69% in total from the same timeframe last year (Q3 2016). In the last quarter alone, web application attacks rose 30% as compared to the second quarter of 2017. Over the last year, a 217% increase in attacks sourcing from the U.S. was seen, with an increase of 48% in the last quarter as compared to the prior one.
SQL injection (SQLi) attacks continued to be heavily utilized by attackers as a part of the significant rise of web application attacks. This attack vector increased 62% since last year, and 19% since last quarter. The significant increase in web application attacks, particularly injection attacks like SQLi, should come as no surprise as the latest version of the OWASP Top 10 2017 that came out last week has injection (inclusive of SQLi) as the top ranked vulnerability category. This new iteration is the first major update to the OWASP Top 10 since 2013, when injection also resided in the top spot.
Perhaps more alarming was the result of taking a closer look at the Mirai botnet and encountering the introduction of WireX malware. While smaller than its predecessor, the Mirai malware strain, which uses Internet of Things (IoT) devices, was responsible for the largest attack seen in Q3 at 109 Gbps. The ongoing Mirai activity, coupled with the introduction of WireX, which commandeers Android devices, highlights the vast potential that exists for new sources of botnet armies.
The lure of easy access to poorly-secured end nodes and easily-available source code make it likely that Mirai-based attacks won't be fading in the near future, said Martin McKeay, senior security advocate and senior editor, State of the Internet / Security Report. Our experience suggests that an army of new potential attackers comes online every day. Couple with that, the ubiquity of Android software and the growth in the Internet of Things are amplifying the risk/reward challenges that enterprises face to tremendous levels.
By the Numbers: Other highlights from Akamai's Third Quarter, 2017 State of the Internet / Security Report include:
The use of Fast Flux DNS by botnets is examined, demonstrating why the use of rapidly changing DNS information helps attackers by making it harder to track and disrupt botnets and malware.
The number of DDoS attacks in Q3 increased by 8% quarter over quarter, highlighted by a 13% increase in the average number of attacks per target (36).
Germany, despite not being among the top five source countries for DDoS attack traffic in the previous quarter, had the largest number of attack traffic source IPs in Q3 - 58,746 - 22% of the global total.
Egypt, last quarter's leader for DDoS attack traffic (44,198) fell out of the top 5 in Q3.
Australia suffered the third most web application attacks (19,115,151) despite not even registering in the top 10 in Q2.
With the holiday shopping season upon us, Akamai expects that both the monetary and emotional aspects of attack dynamics will strongly influence behavior in the fourth quarter. Criminals are likely to leverage the fact that the final quarter of the year is critical for merchants, making the merchants much more likely to pay an extortion letter threatening an attack on Black Friday or Cyber Monday than at many other times of year.
As noted in the Attack Spotlight, the code base from Mirai is still being used and is evolving, added McKeay. In addition, criminals are getting better at hiding their command and control structures, using techniques like Fast Flux DNS. It would not be surprising if, during this holiday season, we see new attacks such as those based on IoT devices or mobile platforms.
Through the SOTI/Security Report, as well as more in-depth research reports, Akamai brings you cutting-edge insight into the ever-changing landscape of attacks and attack tools - delivering information to help you and your team protect your organization.
A complimentary copy of the Q3 2017 State of the Internet / Security Report is available for download at akamai.com/stateoftheinternet-security. Download individual figures, including associated captions here.
Methodology The Akamai Third Quarter, 2017 State of the Internet / Security Report combines attack data from across Akamai's global infrastructure and represents the research of a diverse set of teams throughout the company. The report provides analysis of the current cloud security and threat landscape, as well as insight into attack trends using data gathered from the Akamai Intelligent Platform. The contributors to the State of the Internet / Security Report include security professionals from across Akamai, including the Security Intelligence Response Team (SIRT), the Threat Research Unit, Information Security, and the Custom Analytics group.
About Akamai As the world's largest and most trusted cloud delivery platform, Akamai makes it easier for its customers to provide the best and most secure digital experiences on any device, anytime, anywhere. Akamai's massively distributed platform is unparalleled in scale wi
Most recent headlines
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
06/09/2026
June 9 2026, 23:00 (PDT) Dolby and MagentaTV Bring Fans Closer to the FIFA Worl...
04/08/2026
Dalet, a leading technology and service provider for media-rich organizations, t...
04/07/2026
April 7 2026, 19:00 (PDT) Detective Conan: Fallen Angel of the Highway Opens in...
25/06/2026
Cable Gains Share for Second Consecutive Month in Six-Month-High Finish, Boosted...
25/06/2026
alt= data-nectar-img-srcset=https://www.antonbauer.com/wp-content/uploads/2026/0...
25/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
25/06/2026
The Eurovision Song Contest 2026 in Vienna was a significant success for the Austrian public broadcaster ORF. In Austria, more than 1.5 million viewers tuned in...
25/06/2026
Wisycom has further strengthened its ecosystem of professional wireless solutions with the MPR60 Wideband IEM/IFB Receiver with expanded multichannel IFB mode, ...
25/06/2026
Ease Live, the interactivity expert, today announced that its graphics overlay platform is powering a new interactive experience on Rally.TV, the official video...
25/06/2026
VFX History: the origin of After Effects
Graham Quince June 25, 2026
0 Comments
Before it was Adobe, it was CoSA. This is the VFX history of Adobe Aft...
25/06/2026
Creative Remote, the provider of remote and hybrid offline editing infrastructure, today announced the opening of 41, its new offline edit facility located at 4...
25/06/2026
Rise, the award-winning advocacy group for gender diversity in the broadcast and media technology sector, is pleased to announce the global mentoring cohort for...
25/06/2026
Emergent, a pioneer in browser-based, AI-enhanced content production environments, today announced a strategic partnership with ROCKET, a premier media-centric ...
25/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
25/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
25/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
25/06/2026
Summer savings are heating up. From the Steam Summer Sale to GeForce NOW membership discounts, this week's GFN Thursday delivers double the deals and more w...
25/06/2026
Launching today (Thursday 25 June), new RT podcast Ramble with Joe McGucken is a series of curiosity-driven conversations where actor, writer and comedian Joe ...
25/06/2026
Immune molecule may drive excessive drinking in alcohol use disorder Scripps Research scientists showed that blocking an immune molecule tied to inflammation r...
24/06/2026
Plus: VoiceAssist Basic now available to UA LUNA users
NoiseWorks Audio have just released an update that adds a new Mouth De-Click module to the Advanced t...
24/06/2026
New heavy-duty mic stand joins range
The latest arrival to Gator's Frameworks family introduces a new heavy-duty boom stand that's been designed for...
24/06/2026
Latest major plug-in update goes live
Waves have just announced that the latest major update for their hugely popular plug-in range is now officially availa...
24/06/2026
When assessing cellular coverage, many people look at the signal bars displayed on a smartphone, router or modem. More bars are often assumed to mean better per...
24/06/2026
Rohde & Schwarz THORIS sets new standard for counter UAS defense At Eurosatory 2026, Rohde & Schwarz is unveiling THORIS, a German engineered, sovereign count...
24/06/2026
Rohde & Schwarz expands voice communications modernization program for Egyptian ...
24/06/2026
eds3_5_jq(document).ready(function($) { $(#eds_sliderM519).chameleonSlider_2_1({...
24/06/2026
Streaming sets record high of 46.6% of ad supported TV viewing, driven by Super Bowl and Winter Olympics; overall share of ad supported TV remains steady
NEW Y...
24/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
24/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
24/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
24/06/2026
RE:Vision Effects Announces Twixtor Standalone v 8.1 and a Sale!
Brie Clayton June 24, 2026
0 Comments
Twixtor v8.1 Standalone adds support for variab...
24/06/2026
Dreamtek Uses Full Blackmagic Workflow for Vercel Next JS Event
Brie Clayton June 24, 2026
0 Comments
Blackmagic cameras, switchers, routers, recorder...
24/06/2026
Chyron LIVE Unveils New Features: Haivision StreamHub Integration, SCTE-35 Ad In...
24/06/2026
Mapping an Education How composer Chloe Clarke Smith navigated her Boston Conservatory experience and brought new meaning to her work
June 24, 2026
By
Sara...
24/06/2026
The Next Act Dean Krisha Marcano's vision for a connected Theater Division, and the fund making it possible
June 24, 2026
Photo by Eric Antoniou
The Or...
24/06/2026
Announcing STAGES Magazine 2026 Marking a decade since Boston Conservatory and Berklee College of Music joined forces, this issue spotlights some of the groun...
24/06/2026
In Brazil's TV 3.0 Trials, Appear's X5 is transporting live signals from Bras lia to S o Paulo over the public internet using secure, reliable next-gene...
24/06/2026
Melbourne, Australia - 24 June 2026: Mediaproxy, the global standard for software-based IP compliance monitoring and multiviewing solutions, has named Heartland...
24/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
24/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
24/06/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
24/06/2026
First Rush Brings SDI Multicam ProRes Recording to Apple Silicon Macs
Brie Clayton June 23, 2026
0 Comments
First Rush is a native macOS application d...
24/06/2026
Vertical Drama Beneath Crimson Sails Created with Blackmagic Design
Brie Clayton June 23, 2026
0 Comments
Thunder Child Productions relies on cameras&...
24/06/2026
X-Rite Pantone Adds MSI PRO MAX Displays to Pantone Validated Program for Proven...
24/06/2026
24th June 2026, London: Dara Briain will host brand new comedy entertainment series Dara's Dull Appreciation Society (4x40') celebrating members of th...
24/06/2026
Wednesday 24 June 2026
Sky reveals wild new trailer and images for Shaun the Sh...
24/06/2026
Why Dynamic Media Facilities Matter In this series, we explore the technologies, architectures and operational realities shaping modern media operations. Along ...
24/06/2026
Comscore Announces Partnership with Amazon DSP to Expand Content Addressability ...
24/06/2026
From Cork to Limerick to Earagail:
RT is supporting 21 Arts and Cultural Events all over Ireland this July
RT Supporting the Arts is delighted to spotlight...