Netscout: DDoS attacks rose from 13M+ in 2023 to almost 17M in 2024, becoming a staple of geopolitical conflict as new tech like AI supercharges their power
A type of cyberattack that was once the preserve of petty criminals is becoming a staple of geopolitical conflict as new technology supercharges …
Context & Ripple Effects
This report extends a long-running shift from DDoS as broadly criminal disruption toward a geopolitical instrument. Earlier coverage found state-actor-scale probing of critical internet infrastructure, while a separate analysis showed cyber pressure spreading to shipping as disputes put trade flows in the crosshairs.
The rise also fits an established pattern of sector-specific exposure: financial institutions had already reported rising DDoS targeting of banks and financial firms. Netscout’s figures broaden that evidence from particular targets to overall attack volume, while adding AI as an accelerant.
First-order effects
- Organizations operating internet-facing services face a higher baseline of disruption risk as reported DDoS volume rises from more than 13 million to nearly 17 million attacks year over year.
- DDoS mitigation providers, network operators and their customers must contend with attacks that are described as more potent and effective as AI-enabled capabilities enter the mix.
Second-order effects
- Critical-sector operators—including financial firms and businesses tied to trade flows—are likely to place greater weight on resilience planning, following the escalation of cyber attacks affecting shipping.
- The geopolitical framing makes DDoS defense less a narrow fraud or uptime concern and more a shared dependency among enterprises, carriers and critical-infrastructure operators.
Third-order effects
- If this pattern persists, cyber conflict will increasingly blend high-volume disruption with geopolitical coercion, raising the strategic importance of internet resilience rather than simply perimeter security.
- AI may lower the effort required to adapt and coordinate attacks, intensifying the broader state-linked pressure on core internet infrastructure; the corpus does not establish how quickly defenders can offset that advantage.
The trend: DDoS is evolving from opportunistic online disruption into an AI-amplified instrument of geopolitical pressure against digitally dependent sectors.