The Hidden Tactics Cybercriminals Use in DDoS Attacks—and How You Can Outsmart Them Before It’s Too Late
This article covers how DDoS attacks work, how to recognize them, and what to do before, during, and after an attack.
What is a DDoS attack and how does it work?
A DDoS attack against a website or internet service sends overwhelming amounts of traffic to the underlying server or network to make it slow or unavailable. The “distributed” part of DDoS refers to the fact that the attack is carried out by multiple devices at once, usually from different areas of the world.
The devices employed in a DDoS attack are often part of a botnet — a network of machines infected with malware that allow them to be controlled remotely. They can include anything from routers and laptops to home appliances with online capabilities. In 2025, researchers discovered a botnet made of an estimated 30,000 webcams and video recorders.
