Cheap attacks flood the darknet
Kaspersky Digital Footprint Intelligence tracked more than 256,000 dark-web posts and found 148 active DDoS actors since 2024. Brokered attacks start at $30 and reach $2,000 depending on target size and duration. Subscription-style DDoS-as-a-Service tools appear for as little as $1.
Three ways the services are sold
- Brokered hits: pay someone else to launch the attack.
- Subscription panels: buy access to ready-made tools via Telegram or web dashboards.
- In-house botnets: run your own scripts.
Network-layer floods remain common, yet 92 % of listings also push application-layer strikes aimed straight at websites and services.
Why this matters for UK users
“DDoS attacks have become a more practical and accessible option for threat actors, largely because these services are cheap and easy to obtain. In some cases, the cost of launching an attack can be lower than a standard monthly streaming subscription, or even for a price of a cup of coffee. For businesses, this means DDoS readiness should be part of basic cybersecurity planning. It is equally important to understand the market behind these attacks, since stronger defense begins with a clearer understanding of the threat environment,” says João Pedro Brandão e Silva, Kaspersky Digital Footprint Intelligence analyst.
The low barrier raises everyday risks for small sites, online shops and personal projects. Our VPN services guide explains how encryption and traffic routing can limit exposure when combined with other basic protections.
