DDoS attacks occur daily and are becoming increasingly advanced, with Brazil being a central player in this trend. According to a recent NETSCOUT report, Brazil was the primary target in Latin America during the latter half of 2025, accounting for nearly half of all attacks in the region.
Overall, Brazil experienced 470,677 attacks between July and December of the previous year. Throughout Latin America, this number reached 1 million incidents, and globally, there were over 8 million attacks reported across 203 countries and territories, signaling a new era in the digital warfare landscape.
The assaults are more powerful and more intelligent.
The NETSCOUT survey highlights that distributed denial-of-service attacks have advanced in terms of technical complexity, scale of infrastructure, and cooperation among malicious groups.
Some assaults peaked at a remarkable 30 terabits per second, sufficient to disrupt critical infrastructure without adequate protection. Moreover, approximately 42% of the attacks were multi-vector, utilizing two to five distinct techniques simultaneously and occasionally altering tactics mid-offensive to evade defense mechanisms.
The increasing utilization of artificial intelligence is noteworthy, as indicated by a report showing a 219% rise in references to harmful AI tools on hidden online platforms. These tools, such as language models, are being employed to speed up the manipulation of security weaknesses and expand botnets created by hacked IoT gadgets.
Compromised IoT devices, which are frequently placed in users’ homes, have been used to produce large amounts of harmful traffic, with some instances reaching over 1 Tbps.
Brazil is at the forefront of the Latin American list.
Brazil stands out as the most affected country in the regional context, with close to half a million out of over 1 million cyber attacks in Latin America targeting Brazilian networks.
The most commonly investigated vectors in this area focus on TCP traffic and amplification methods using DNS and STUN. These techniques are used to increase the amount of data sent to the target. This form of attack typically targets servers with weak configurations or susceptible connected devices.
Wireless telecommunications companies are the most targeted sector, experiencing over 114,000 attacks during the period. Hosting, computing infrastructures, and wired telecom operators follow in terms of vulnerability.
The report indicates that DDoS attacks are no longer limited to major global platforms and have now targeted banks, road transport companies, wholesale trade, and even religious organizations.
Traditional methods of defense are inadequate.
Richard Hummel, the threat intelligence director at NETSCOUT, warns that cybercriminals are targeting companies that use outdated security measures. He argues that implementing automated and proactive security measures is no longer just a technical choice but a crucial aspect of strategic risk management.
The company states that it monitors around 66% of the global IPv4 space and detects tens of thousands of attacks every day. The data in the reports is derived from real observed traffic and does not include any artificial aggregations that could artificially increase the numbers.
What that signifies to you
Brazilian businesses, particularly those involved in essential digital services, should be vigilant as the threat of attacks has significantly risen in complexity. DDoS attacks now entail more than just overwhelming servers with high traffic volumes; they also incorporate real-time adjustments, AI utilization, and collaboration among various entities.
As a regular user, it’s advisable to be vigilant when a website goes offline, an app malfunctions, or a banking service becomes unreliable. Issues often stem from a botnet comprising numerous devices globally.
2025 represented a significant advancement in this particular threat, as depicted by NETSCOUT. It seems that 2026 is expected to be just as turbulent.
