Q3 2017 Akamai State of the Internet / Security Report Reveals Significant Increase in Web Application Security Attacks, Evolution of Attacker Strategies Holiday shopping season may see new attack types leveraging IoT devices, mobile platforms
Cambridge, MA | November 28, 2017
Newly released data shows that web application attacks continued to rise significantly in both the quarter-over-quarter and year-over-year timeframes, according to the Third Quarter, 2017 State of the Internet / Security Report released by Akamai Technologies, Inc. (NASDAQ: AKAM). In addition, further evaluation of the Mirai botnet and WireX malware attacks suggests that attackers may leverage IoT and Android devices to build future botnet armies.
The report found that the number of web application attacks last quarter (Q3 2017) increased 69% in total from the same timeframe last year (Q3 2016). In the last quarter alone, web application attacks rose 30% as compared to the second quarter of 2017. Over the last year, a 217% increase in attacks sourcing from the U.S. was seen, with an increase of 48% in the last quarter as compared to the prior one.
SQL injection (SQLi) attacks continued to be heavily utilized by attackers as a part of the significant rise of web application attacks. This attack vector increased 62% since last year, and 19% since last quarter. The significant increase in web application attacks, particularly injection attacks like SQLi, should come as no surprise as the latest version of the OWASP Top 10 2017 that came out last week has injection (inclusive of SQLi) as the top ranked vulnerability category. This new iteration is the first major update to the OWASP Top 10 since 2013, when injection also resided in the top spot.
Perhaps more alarming was the result of taking a closer look at the Mirai botnet and encountering the introduction of WireX malware. While smaller than its predecessor, the Mirai malware strain, which uses Internet of Things (IoT) devices, was responsible for the largest attack seen in Q3 at 109 Gbps. The ongoing Mirai activity, coupled with the introduction of WireX, which commandeers Android devices, highlights the vast potential that exists for new sources of botnet armies.
The lure of easy access to poorly-secured end nodes and easily-available source code make it likely that Mirai-based attacks won't be fading in the near future, said Martin McKeay, senior security advocate and senior editor, State of the Internet / Security Report. Our experience suggests that an army of new potential attackers comes online every day. Couple with that, the ubiquity of Android software and the growth in the Internet of Things are amplifying the risk/reward challenges that enterprises face to tremendous levels.
By the Numbers: Other highlights from Akamai's Third Quarter, 2017 State of the Internet / Security Report include:
The use of Fast Flux DNS by botnets is examined, demonstrating why the use of rapidly changing DNS information helps attackers by making it harder to track and disrupt botnets and malware.
The number of DDoS attacks in Q3 increased by 8% quarter over quarter, highlighted by a 13% increase in the average number of attacks per target (36).
Germany, despite not being among the top five source countries for DDoS attack traffic in the previous quarter, had the largest number of attack traffic source IPs in Q3 - 58,746 - 22% of the global total.
Egypt, last quarter's leader for DDoS attack traffic (44,198) fell out of the top 5 in Q3.
Australia suffered the third most web application attacks (19,115,151) despite not even registering in the top 10 in Q2.
With the holiday shopping season upon us, Akamai expects that both the monetary and emotional aspects of attack dynamics will strongly influence behavior in the fourth quarter. Criminals are likely to leverage the fact that the final quarter of the year is critical for merchants, making the merchants much more likely to pay an extortion letter threatening an attack on Black Friday or Cyber Monday than at many other times of year.
As noted in the Attack Spotlight, the code base from Mirai is still being used and is evolving, added McKeay. In addition, criminals are getting better at hiding their command and control structures, using techniques like Fast Flux DNS. It would not be surprising if, during this holiday season, we see new attacks such as those based on IoT devices or mobile platforms.
Through the SOTI/Security Report, as well as more in-depth research reports, Akamai brings you cutting-edge insight into the ever-changing landscape of attacks and attack tools - delivering information to help you and your team protect your organization.
A complimentary copy of the Q3 2017 State of the Internet / Security Report is available for download at akamai.com/stateoftheinternet-security. Download individual figures, including associated captions here.
Methodology The Akamai Third Quarter, 2017 State of the Internet / Security Report combines attack data from across Akamai's global infrastructure and represents the research of a diverse set of teams throughout the company. The report provides analysis of the current cloud security and threat landscape, as well as insight into attack trends using data gathered from the Akamai Intelligent Platform. The contributors to the State of the Internet / Security Report include security professionals from across Akamai, including the Security Intelligence Response Team (SIRT), the Threat Research Unit, Information Security, and the Custom Analytics group.
About Akamai As the world's largest and most trusted cloud delivery platform, Akamai makes it easier for its customers to provide the best and most secure digital experiences on any device, anytime, anywhere. Akamai's massively distributed platform is unparalleled in scale wi
Most recent headlines
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
09/10/2026
September 10 2026, 06:00 (PDT) Dolby Expands Dolby OptiView Platform with New Capabilities at IBC 2026
New Sports Intelligence helps providers better unders...
08/10/2026
Modern venues have come a long way since the tinny, echoing audio of the mid 20t...
08/10/2026
ESPN's first Super Bowl production will stream in English and Spanish on Disney+, while the ESPN App carries the full slate of game, ManningCast, studio, an...
08/10/2026
From high-school videoboards to War Eagle Productions, the Opelika native is learning how to lead shows and capture big moments
The future of live sports produ...
08/10/2026
The Television Academy and Prime Video have announced a six-year agreement making Prime Video the exclusive global home of the Emmy Awards beginning with the 20...
08/10/2026
Techex will exhibit at NAB Show New York 2026 (Booth 623, Javits Center, October...
08/10/2026
X Games has announced the appointment of Steve Rogers as Chief Operating Officer. Rogers previously served as COO of World Supercross and spent nearly a decade ...
08/10/2026
Fonn Group has appointed Trevor Spielmann as Sales Director for Germany, Austria, and Switzerland. Spielmann joins from EVS, where he held sales and business de...
08/10/2026
The flagship program will originate from major PG events with a four-camera production, live distribution across PGTV, social platforms
Perfect Game is bringin...
08/10/2026
Innovation rarely happens in a vacuum. More often, it happens at the point of collision: when worlds that have run on separate tracks begin to converge. That is...
08/10/2026
For decades, the production and broadcast services business has run on a familia...
08/10/2026
Uplynk, Zixi, BroadView Software, and Grass Valley have published The IP Converg...
08/10/2026
The NFL has announced the return of the Big Data Bowl, the league's analytics competition, now in its ninth year and again powered by AWS. Registration is o...
08/10/2026
Eutelsat has renewed its partnership with T l diffusion d'Alg rie (TDA), Algeria's national broadcasting network operator, for continued distribution of...
08/10/2026
Disney will livestream Super Bowl LXI on February 14, 2027, alongside the game's broadcast on ESPN and ABC. All Disney subscribers in the United States wi...
08/10/2026
RHStv and Red House Streaming have announced an expansion of their partnership w...
08/10/2026
Gray Media has announced a distribution agreement with TEGNA and DAZN to simulca...
08/10/2026
SVG readers can save 10% on registration and receive a complimentary Solutions H...
08/10/2026
PROTON Camera Innovations GmbH has been named a recipient of a 2026 Technology a...
08/10/2026
Industry leaders discuss real-world cloud workflows for live game production, pl...
08/10/2026
The next-gen audio technology joins Dolby Vision as part of Apple TV's immersive F1 experience...
08/10/2026
David France, Jesse Short Bull, Mato Wayuhi, N. Bird Runningwater, Jodi Archambau, Jhane Myers, Paul McGuire, Amber Morning Star Byars, Holly Macarro, Nick Tils...
08/10/2026
Dynamic panning plug-ins get an upgrade
Sound Particles have just announced major updates for two of their popular dynamic panning plug-ins. Energy Panner 2...
08/10/2026
New expandable instrument boasts full DMNO engine
UDO Audio have just announced the upcoming release of a new, expandable synth that packs the power of the ...
08/10/2026
Two new subwoofers added to monitoring line-up
ADAM Audio's monitoring range has just been expanded with two new DSP-equipped subwoofers, the Sub8 PRO a...
08/10/2026
eds3_5_jq(document).ready(function($) { $(#eds_sliderM519).chameleonSlider_2_1({ content_source:......
08/10/2026
Calrec gives broadcasters freedom of choice at NAB Show New York We're looking forward to meeting up with you all at NAB New York on 21st-22nd October.
Cal...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Globecast, a leading provider of broadcast, media and entertainment managed services, will showcase its next generation of media orchestration services at NAB S...
08/10/2026
Clear-Com played a critical role in the production communications infrastructure for Rock in Rio 2026, one of the world's largest and most recognized music...
08/10/2026
Sohonet Launches ClearView Rush: A Leap Forward in Studio Review, Built for Crea...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Ikegami announces a major expansion to its range of broadcast-quality live production cameras. Scheduled for introduction on Ikegami booth 708 at NAB New York, ...
08/10/2026
Calrec will be located at Booth 444.
Freedom to choose
The media landscape is evolving quickly, and the broadcasters best placed for what comes next will be...
08/10/2026
LiveU has announced that CRD Audiovisuel relied on LiveUs LU900Q intelligent production unit, with built-in native LiveU IQ (LIQ ) connectivity, to deliver live...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/10/2026
Marshall Electronics, a globally recognized provider of high-performance video solutions for broadcast, streaming, AV and professional production, will exhibit ...
08/10/2026
14-hour package also includes A Remarkable Place to Die season 2 as well as libr...
Q3 2017 Akamai State of the Internet / Security Report Reveals Significant Increase in Web Application Security Attacks, Evolution of Attacker Strategies Holiday shopping season may see new attack types leveraging IoT devices, mobile platforms 
