<story><title>The largest DDoS attack to date, peaking above 398M rps</title><url>https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/</url></story><parent_chain><item><author>pythonguython</author><text>Who has an incentive to carry out these DDos attacks? Why would anyone be willing to spend large amounts of money and develop a sophisticated attack against corporate cloud infrastructure? It seems like the only reasonable answer is foreign governments. But still what is the result - you inconvenience American tech companies and their customers for a few hours? This happens all the time, so clearly someone finds it worthwhile. Can anyone help me understand?</text></item></parent_chain><comment><author>jedberg</author><text>I&amp;#x27;ve been working on anti-DDOS off and on for 20 years now.  The answer is sometimes government actors, but oftentimes scammers in Eastern Europe. They do these big attacks for street cred amongst the botting community.&lt;p&gt;They then use their street cred to get paid by less scrupulous actors to attack their rivals.  Sometimes the people paying are governments, sometimes just shady companies.  For example last year there was a lot of crypto companies attacking each other&amp;#x27;s websites.&lt;p&gt;Most of the people who do this have a lot of technical skill but not a lot of opportunity to get paid for it based on where they live or the circumstances of their upbringing.</text></comment>
<story><title>The largest DDoS attack to date, peaking above 398M rps</title><url>https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/</url></story><parent_chain><item><author>pythonguython</author><text>Who has an incentive to carry out these DDos attacks? Why would anyone be willing to spend large amounts of money and develop a sophisticated attack against corporate cloud infrastructure? It seems like the only reasonable answer is foreign governments. But still what is the result - you inconvenience American tech companies and their customers for a few hours? This happens all the time, so clearly someone finds it worthwhile. Can anyone help me understand?</text></item></parent_chain><comment><author>anonacct37</author><text>PR. Attack Google or cloudflare. Wait for them to publish a blog post about the biggest attack ever seen, then tell potential customers of your botnet that you can launch a bigger attack than anyone else and point to the above blog post.</text></comment>