
Q3 2017 Akamai State of the Internet / Security Report Reveals Significant Increase in Web Application Security Attacks, Evolution of Attacker Strategies Holiday shopping season may see new attack types leveraging IoT devices, mobile platforms
Cambridge, MA | November 28, 2017
Newly released data shows that web application attacks continued to rise significantly in both the quarter-over-quarter and year-over-year timeframes, according to the Third Quarter, 2017 State of the Internet / Security Report released by Akamai Technologies, Inc. (NASDAQ: AKAM). In addition, further evaluation of the Mirai botnet and WireX malware attacks suggests that attackers may leverage IoT and Android devices to build future botnet armies.
The report found that the number of web application attacks last quarter (Q3 2017) increased 69% in total from the same timeframe last year (Q3 2016). In the last quarter alone, web application attacks rose 30% as compared to the second quarter of 2017. Over the last year, a 217% increase in attacks sourcing from the U.S. was seen, with an increase of 48% in the last quarter as compared to the prior one.
SQL injection (SQLi) attacks continued to be heavily utilized by attackers as a part of the significant rise of web application attacks. This attack vector increased 62% since last year, and 19% since last quarter. The significant increase in web application attacks, particularly injection attacks like SQLi, should come as no surprise as the latest version of the OWASP Top 10 2017 that came out last week has injection (inclusive of SQLi) as the top ranked vulnerability category. This new iteration is the first major update to the OWASP Top 10 since 2013, when injection also resided in the top spot.
Perhaps more alarming was the result of taking a closer look at the Mirai botnet and encountering the introduction of WireX malware. While smaller than its predecessor, the Mirai malware strain, which uses Internet of Things (IoT) devices, was responsible for the largest attack seen in Q3 at 109 Gbps. The ongoing Mirai activity, coupled with the introduction of WireX, which commandeers Android devices, highlights the vast potential that exists for new sources of botnet armies.
The lure of easy access to poorly-secured end nodes and easily-available source code make it likely that Mirai-based attacks won't be fading in the near future, said Martin McKeay, senior security advocate and senior editor, State of the Internet / Security Report. Our experience suggests that an army of new potential attackers comes online every day. Couple with that, the ubiquity of Android software and the growth in the Internet of Things are amplifying the risk/reward challenges that enterprises face to tremendous levels.
By the Numbers: Other highlights from Akamai's Third Quarter, 2017 State of the Internet / Security Report include:
The use of Fast Flux DNS by botnets is examined, demonstrating why the use of rapidly changing DNS information helps attackers by making it harder to track and disrupt botnets and malware.
The number of DDoS attacks in Q3 increased by 8% quarter over quarter, highlighted by a 13% increase in the average number of attacks per target (36).
Germany, despite not being among the top five source countries for DDoS attack traffic in the previous quarter, had the largest number of attack traffic source IPs in Q3 - 58,746 - 22% of the global total.
Egypt, last quarter's leader for DDoS attack traffic (44,198) fell out of the top 5 in Q3.
Australia suffered the third most web application attacks (19,115,151) despite not even registering in the top 10 in Q2.
With the holiday shopping season upon us, Akamai expects that both the monetary and emotional aspects of attack dynamics will strongly influence behavior in the fourth quarter. Criminals are likely to leverage the fact that the final quarter of the year is critical for merchants, making the merchants much more likely to pay an extortion letter threatening an attack on Black Friday or Cyber Monday than at many other times of year.
As noted in the Attack Spotlight, the code base from Mirai is still being used and is evolving, added McKeay. In addition, criminals are getting better at hiding their command and control structures, using techniques like Fast Flux DNS. It would not be surprising if, during this holiday season, we see new attacks such as those based on IoT devices or mobile platforms.
Through the SOTI/Security Report, as well as more in-depth research reports, Akamai brings you cutting-edge insight into the ever-changing landscape of attacks and attack tools - delivering information to help you and your team protect your organization.
A complimentary copy of the Q3 2017 State of the Internet / Security Report is available for download at akamai.com/stateoftheinternet-security. Download individual figures, including associated captions here.
Methodology The Akamai Third Quarter, 2017 State of the Internet / Security Report combines attack data from across Akamai's global infrastructure and represents the research of a diverse set of teams throughout the company. The report provides analysis of the current cloud security and threat landscape, as well as insight into attack trends using data gathered from the Akamai Intelligent Platform. The contributors to the State of the Internet / Security Report include security professionals from across Akamai, including the Security Intelligence Response Team (SIRT), the Threat Research Unit, Information Security, and the Custom Analytics group.
About Akamai As the world's largest and most trusted cloud delivery platform, Akamai makes it easier for its customers to provide the best and most secure digital experiences on any device, anytime, anywhere. Akamai's massively distributed platform is unparalleled in scale wi
Most recent headlines
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
07/10/2026
Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...
06/09/2026
June 9 2026, 23:00 (PDT) Dolby and MagentaTV Bring Fans Closer to the FIFA Worl...
06/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
06/08/2026
At IBC2026, MediaKind will make its first major appearance as a unified global powerhouse in video, showcasing one of the world's most comprehensive video i...
06/08/2026
Big Blue Marble (#5.A63) will demonstrate how its integrated technology and operational expertise help media companies scale premium services with less complexi...
06/08/2026
LA JOLLA, CA-Scripps Research has received more than $500,000 in first-year fund...
06/08/2026
LA JOLLA, CA-Viruses are masters at invading our cells thanks to specialized proteins that coat their surfaces. When scientists design vaccines, they often crea...
06/08/2026
LA JOLLA, CA-The brain has its own immune system, which detects threats and mounts a defense. A growing body of evidence has shown that in Alzheimer's disea...
06/08/2026
LA JOLLA, CA-Scripps Research chemist Jin-Quan Yu has been elected to the National Academy of Sciences (NAS), one of the highest honors a scientist can achieve....
06/08/2026
LA JOLLA, CA-Scripps Research ranked third in the inaugural 2026 Cure Innovation Index recognizing the top-performing institutes and centers across the United S...
06/08/2026
Benjamin Cravatt, the Gilula Chair of Chemical Biology and a professor of chemis...
06/08/2026
LA JOLLA, CA-Dennis Burton, professor and the James & Jessie Minor Chair in Immu...
06/08/2026
LA JOLLA, CA-Inside every human cell, proteins are constantly being tagged with small chemical modifications after they're produced. Known as post-translati...
06/08/2026
LA JOLLA-Scripps Research has established the Ian Wilson Endowed Chair, a new fa...
06/08/2026
Scripps Research's Skaggs Graduate School of Chemical and Biological Science...
06/08/2026
LA JOLLA, CA-Professor Jin-Quan Yu of Scripps Research has been elected to the Fellowship of the Royal Society, the U.K.'s national academy of sciences and ...
06/08/2026
LA JOLLA, CA-For years, researchers have been hoping for vaccines that protect people against not just one strain of HIV, but every strain of the quickly mutati...
06/08/2026
LA JOLLA, CA-The Calibr-Skaggs Institute for Innovative Medicines, the nonprofit...
06/08/2026
LA JOLLA, CA-Building the complex 3D molecules needed for new medicines has alwa...
06/08/2026
LA JOLLA, CA-Fentanyl and related variants of the synthetic opioid kill more Americans each year than car accidents and gun violence combined. In too-high doses...
06/08/2026
LA JOLLA, CA-What do decoding communication between organs and reimagining the future of genome editing have in common? They're among the scientific questio...
06/08/2026
LA JOLLA, CA-Of the 1.2 million people living with HIV in the United States, app...
06/08/2026
LA JOLLA, CA-For some people, cancer immunotherapies are life-changing. These treatments can turn the body's own immune system against a tumor, either elimi...
06/08/2026
LA JOLLA, CA-Many conditions that cause vision loss share a common feature: the ...
06/08/2026
LA JOLLA, CA-RNA interference is a natural mechanism for living cells to control whether specific genes are being used or not.
Crowned with the 2006 Nobel Priz...
06/08/2026
LA JOLLA, CA-The drugs that keep rheumatoid arthritis in check may one day help people stop drinking. A new Scripps Research study shows that an anti-inflammato...
06/08/2026
LA JOLLA, CA-Antibiotic resistance is one of the most urgent threats to global health, linked to an estimated 4.7 million deaths worldwide in 2019 alone. As mor...
06/08/2026
LA JOLLA, CA-Some of the world's best-selling diabetes drugs depend on a che...
06/08/2026
LA JOLLA, CA-Detecting infectious disease threats early and responding quickly can dramatically alter the course of an infectious outbreak. Technologies such as...
06/08/2026
LA JOLLA, CA-Molecular biophysicist Joan Pulupa will join Scripps Research in Ja...
06/08/2026
LA JOLLA, CA-HIV is globally so diverse, consisting of hundreds of thousands of ...
06/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
06/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
06/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
06/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
06/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
06/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
06/08/2026
At this year's SET EXPO, PlayBox Neo will present recent innovations across its PlayBox Neo Suite and integrated range of broadcast media solutions. By show...
06/08/2026
Live demo at IBC2026 VisualOn Booth, Hall 5, Stand A55
Amsterdam, Netherlands Modern Streaming Solutions Private Limited, a rising force in India's dig...
06/08/2026
Screen Australia and YouTube Australia fund five new teams through eleventh Skip...
06/08/2026
How Karukera Studio Built a Media Production Hub with SNS EVO
Melanie Ciotti August 5, 2026
0 Comments
Hero images displays Karukera Studio in Sainte-...
06/08/2026
NHK drama series Rosanjin no Kamado shot on PYXIS 6K
Brie Clayton August 5, 2026
0 Comments
Blackmagic PYXIS 6K and DaVinci Resolve Studio capture the...
06/08/2026
Camera Match: AutoSetup 3d Plugin / script for Photomontages- Cinema 4D
Jamie Cardoso August 5, 2026
0 Comments
If you do any kind of Architectural Vi...
06/08/2026
In Time airs Monday 10 August at 9.35pm on RT One and RT Player
In Time is the first film account of the life of D nal Lunny, one of the most influential Iri...
06/08/2026
Editor's note: This post is part of Into the Omniverse, a series focused on how developers, 3D practitioners and enterprises can transform their workflows u...
06/08/2026
August is here, bringing 26 new games for GeForce NOW members.
Command the seas in World of Warships: Legends and discover what's next in the GeForce NOW ...
05/08/2026
Thomson's Climate Crisis Toolkit for Media in Tanzania is being included in a new virtual library designed to ensure accurate and engaging storytelling arou...
05/08/2026
RSNs, teams, leagues, and streamers explore the present and future of local spor...
05/08/2026
As sports-production workflows generate larger volumes of unstructured data and ...