Link11 Reports 225% more DDoS attacks in H1 2025 with new tactics against infrastructure

Cybersecurity Update: DDoS Attack Trends in 2025
The threat landscape for distributed denial-of-service (DDoS) attacks has intensified significantly in the first half of 2025. According to the Link11 European Cyber Report, attacks targeting the Link11 network increased by 225% compared to the same period in 2024. There has been a notable rise in attack frequency as well as an escalation in duration, intensity, and technical sophistication.
Technical Specifications and Impact
In the first half of 2025, DDoS attack volumes reached 438 terabytes, equivalent to over seven years of continuous 4K streaming. The peak values recorded were 1.2 terabits per second and 207 million packets per second, presenting challenges even to high-performance systems. The longest documented attack lasted more than eight days, indicating a shift from short flash attacks to sustained campaigns.
Advanced Attack Techniques
Link11 analysts have observed a significant increase in Layer 7 attacks, which mimic legitimate user traffic. These attacks generate normal-seeming requests, making them difficult to detect amidst regular data traffic.
Geopolitical Influence on Cybersecurity
Politically motivated attacks have been prevalent, with groups such as NoName057(16) targeting critical infrastructure like government agencies and financial institutions. These attacks often align with geopolitical events and security policy decisions.
Professionalization of DDoS Attacks
There is a trend towards more organized attacks, utilizing DDoS-as-a-service platforms and AI to optimize and disguise attack patterns. This is highlighted in the World Economic Forum’s Global Cybersecurity Outlook 2025 as a significant factor in the evolving threat landscape.
Recommendations for Enhanced Security
Organizations are advised to strengthen their security architecture to mitigate the impact of DDoS attacks. Recommended measures include:
- Real-time monitoring for early detection
- AI-supported defense systems for automated response
- Contingency plans and redundancy strategies
About Link11
Link11 is a European IT security provider specializing in protecting global infrastructures and web applications from cyberattacks. The company offers cloud-based security solutions and is certified by PCI DSS and ISO 27001.
Contact Information
Lisa Froehlich
Link11 GmbH
l.froehlich@link11.com