
Q3 2017 Akamai State of the Internet / Security Report Reveals Significant Increase in Web Application Security Attacks, Evolution of Attacker Strategies Holiday shopping season may see new attack types leveraging IoT devices, mobile platforms
Cambridge, MA | November 28, 2017
Newly released data shows that web application attacks continued to rise significantly in both the quarter-over-quarter and year-over-year timeframes, according to the Third Quarter, 2017 State of the Internet / Security Report released by Akamai Technologies, Inc. (NASDAQ: AKAM). In addition, further evaluation of the Mirai botnet and WireX malware attacks suggests that attackers may leverage IoT and Android devices to build future botnet armies.
The report found that the number of web application attacks last quarter (Q3 2017) increased 69% in total from the same timeframe last year (Q3 2016). In the last quarter alone, web application attacks rose 30% as compared to the second quarter of 2017. Over the last year, a 217% increase in attacks sourcing from the U.S. was seen, with an increase of 48% in the last quarter as compared to the prior one.
SQL injection (SQLi) attacks continued to be heavily utilized by attackers as a part of the significant rise of web application attacks. This attack vector increased 62% since last year, and 19% since last quarter. The significant increase in web application attacks, particularly injection attacks like SQLi, should come as no surprise as the latest version of the OWASP Top 10 2017 that came out last week has injection (inclusive of SQLi) as the top ranked vulnerability category. This new iteration is the first major update to the OWASP Top 10 since 2013, when injection also resided in the top spot.
Perhaps more alarming was the result of taking a closer look at the Mirai botnet and encountering the introduction of WireX malware. While smaller than its predecessor, the Mirai malware strain, which uses Internet of Things (IoT) devices, was responsible for the largest attack seen in Q3 at 109 Gbps. The ongoing Mirai activity, coupled with the introduction of WireX, which commandeers Android devices, highlights the vast potential that exists for new sources of botnet armies.
The lure of easy access to poorly-secured end nodes and easily-available source code make it likely that Mirai-based attacks won't be fading in the near future, said Martin McKeay, senior security advocate and senior editor, State of the Internet / Security Report. Our experience suggests that an army of new potential attackers comes online every day. Couple with that, the ubiquity of Android software and the growth in the Internet of Things are amplifying the risk/reward challenges that enterprises face to tremendous levels.
By the Numbers: Other highlights from Akamai's Third Quarter, 2017 State of the Internet / Security Report include:
The use of Fast Flux DNS by botnets is examined, demonstrating why the use of rapidly changing DNS information helps attackers by making it harder to track and disrupt botnets and malware.
The number of DDoS attacks in Q3 increased by 8% quarter over quarter, highlighted by a 13% increase in the average number of attacks per target (36).
Germany, despite not being among the top five source countries for DDoS attack traffic in the previous quarter, had the largest number of attack traffic source IPs in Q3 - 58,746 - 22% of the global total.
Egypt, last quarter's leader for DDoS attack traffic (44,198) fell out of the top 5 in Q3.
Australia suffered the third most web application attacks (19,115,151) despite not even registering in the top 10 in Q2.
With the holiday shopping season upon us, Akamai expects that both the monetary and emotional aspects of attack dynamics will strongly influence behavior in the fourth quarter. Criminals are likely to leverage the fact that the final quarter of the year is critical for merchants, making the merchants much more likely to pay an extortion letter threatening an attack on Black Friday or Cyber Monday than at many other times of year.
As noted in the Attack Spotlight, the code base from Mirai is still being used and is evolving, added McKeay. In addition, criminals are getting better at hiding their command and control structures, using techniques like Fast Flux DNS. It would not be surprising if, during this holiday season, we see new attacks such as those based on IoT devices or mobile platforms.
Through the SOTI/Security Report, as well as more in-depth research reports, Akamai brings you cutting-edge insight into the ever-changing landscape of attacks and attack tools - delivering information to help you and your team protect your organization.
A complimentary copy of the Q3 2017 State of the Internet / Security Report is available for download at akamai.com/stateoftheinternet-security. Download individual figures, including associated captions here.
Methodology The Akamai Third Quarter, 2017 State of the Internet / Security Report combines attack data from across Akamai's global infrastructure and represents the research of a diverse set of teams throughout the company. The report provides analysis of the current cloud security and threat landscape, as well as insight into attack trends using data gathered from the Akamai Intelligent Platform. The contributors to the State of the Internet / Security Report include security professionals from across Akamai, including the Security Intelligence Response Team (SIRT), the Threat Research Unit, Information Security, and the Custom Analytics group.
About Akamai As the world's largest and most trusted cloud delivery platform, Akamai makes it easier for its customers to provide the best and most secure digital experiences on any device, anytime, anywhere. Akamai's massively distributed platform is unparalleled in scale wi
Most recent headlines
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
09/10/2026
September 10 2026, 06:00 (PDT) Dolby Expands Dolby OptiView Platform with New Capabilities at IBC 2026
New Sports Intelligence helps providers better unders...
07/10/2026
Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...
23/09/2026
Koori Knockout returns home exclusively to NITV and SBS On Demand in 2026
11 September, 2026
Media releases
Fans can catch all the live action exclusively ...
23/09/2026
Rohde & Schwarz acquires NEOSAT and PHYTRONIC and strengthens its competencies i...
23/09/2026
1. ABOUT THE PROGRAMME
The National Film and Video Foundation (NFVF) invites applications from experienced producers who own or manage a South African product...
23/09/2026
The National Film and Video Foundation (NFVF) is pleased to announce the opening...
23/09/2026
Download Now!
To receive a short case study showcasing NHK Technologies, Inc. (NT) s audio setup, please enter the following details:
--
First Name* Fir...
23/09/2026
Nielsen CMI data reveals a changing fast-food landscape, with value, convenience...
23/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
23/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
23/09/2026
COW Jobs: Blender on Windows - Generalist - Remote
Brie Clayton September 23, 2026
0 Comments
Application Users - Blender on Windows - Generalist
Se...
23/09/2026
Version 1.8 recognised for new workflow tools, boosted control panel flexibility and ease of integration into IP networks...
23/09/2026
Hiltron Communications reports a successful 2026 International Broadcasting Convention, held at the RAI Amsterdam. Exhibiting on stand A37 in Hall 1, Hiltron ex...
23/09/2026
Reinforcing its long-term commitment to the Middle East and North Africa (MENA) broadcast market, LiveU is presenting the Q Era at CABSAT 2026, on Stand H1-D35 ...
23/09/2026
Agence France-Presse (AFP), a global news agency, and Dalet, a leading technology and service provider for media-rich organizations, today announced a partnersh...
23/09/2026
Berklee Connect Unlocks the Power of a Global Network Katie Vitolins BM '04 knows firsthand what Berklee's alumni community can make possible. Now she...
23/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
23/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
23/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
23/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
23/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
23/09/2026
Westminster Schools, a K through 12 school in Atlanta, Georgia with approximately 2,000 students, has transformed its student broadcast and digital storytelling...
23/09/2026
The 2026 edition of CABSAT and SATExpo may have a new home and dates in the diary, but it still retains a strong presence from UK companies in the GREAT Britain...
23/09/2026
Glensound will return to CABSAT with new developments in professional monitoring and Dante interfacing, alongside its established commentary, esports and parlia...
23/09/2026
Wednesday 23 September 2026
Sky Sports to show England Men's tour of South ...
23/09/2026
Comscore Partners with datafuelX to Bring Seamless Currency Adoption Into a Comp...
23/09/2026
Luxembourg, 23 September 2026 - SES today announced the appointment of Mr. Michel Scholer, Secretary General of the Luxembourg Government and Chief of Staff to ...
23/09/2026
RT One and RT Player, Friday 25 September
Ceol le Ch ile, a new series that follows Irish artists as they collaborate with musicians from diverse background...
23/09/2026
Available now on RT Listen
New information has come to light in the case of mi...
23/09/2026
When Sakeena Fiza describes her work as a validation engineer at NVIDIA, she does so in terms more befitting a detective story than a world-class engineering la...
22/09/2026
From Malaysia to Mexico and from DR Congo to Ukraine, this year's 12 finalists for the 2026 Thomson Foundation Young Journalist of the Year award tell extra...
22/09/2026
The annual preseason content-gathering event brought 36 NHL players to Las Vegas, where ESPN used 2.5 kilowatts of laser power and a motion-control camera syste...
22/09/2026
Neumann has introduced the KK 104 A (cardioid) and KK 105 A (supercardioid) wireless capsule heads, succeeding the KK 204 and KK 205. The new capsules are compa...
22/09/2026
The NFL and TMRW Sports have announced a new annual Pro Flag Showcase to be held during Super Bowl LXI week in Los Angeles. The event will feature top flag foot...
22/09/2026
Washington State University has unveiled a new end zone video display and audio ...
22/09/2026
Disney's SVP of Live Operations and Engineering details the technology behin...
22/09/2026
Cosm has announced two senior promotions. Mazen Alawar has been promoted to SVP,...
22/09/2026
Mississippi State University's University Television Center has purchased four KOKUSAI DENKI SK-UHD7000-S2 cameras since 2024, with plans to add two more, a...
22/09/2026
Net Insight has announced that Christine Kjellvard will assume the role of interim Chief Financial Officer on November 1, 2026. Kjellvard has previously held in...
22/09/2026
Net Insight has announced Zyntai TimeNode Access, a compact PTP Grandmaster designed for distributed edge sites. The product carries secure, precise time across...
22/09/2026
Sam Hazeldine, Austin Amelio, Padraic McKinley, Julia Jones, and Ethan Hawke attend the premiere of The Weight at The Ray Theatre on January 26, 2026, in Park...
22/09/2026
Second high-gain tone plug-in released
Following on from their debut release, Chainsaw Suite, Avalanche Tones have announced the launch of their second plug...
22/09/2026
Uncompressed audio with below 6ms of latency
Lewitt's have just introduced their first pair of headphones which, despite being aimed primarily at studio...
22/09/2026
Two new capsule heads for Sennheiser wireless systems
Neumann have announced the upcoming launch of the KK 104 A and KK 105 A, a pair of new premium condens...
22/09/2026
Apogee Plugins Are Moving to Plugin Alliance We're excited to share an important update about the future of Apogee plugins.
Apogee plugins are moving to Pl...
22/09/2026
Parkland, Florida, US, September 22, 2026: SipRadius, widely recognized for making content processing and connectivity secure and seamless, has been honored wit...
22/09/2026
VanityFilter 3.1.5 adds project files and adjustable protection around lips, bro...
22/09/2026
Chile's TV Modernizes Broadcast Operations with Blackmagic Design
Brie Clayton September 22, 2026
0 Comments
URSA Broadcast G2 brings versatility...
22/09/2026
OWC Shares Sneak Peek at Amazon Prime Big Deal Days Pricing
Brie Clayton September 22, 2026
0 Comments
Image courtesy of Deposit Photos
Business and ...