Eleven11Bot: Nova Massive Botnet was discovered by making DDOS attacks

Nokia researchers identified a new infected device network for DDOS attacks in the United States. Eleven11Bot was called, Botnet apparently consists of more than 30,000 webcams and video recorders around the worldAlthough it is concentrated in most countries.

. Botnet was first detected in February 2025When Nokia’s monitoring team Deepfield Defender has made a major attack. At that time, a large number of IP addresses distributed globally were defined as responsible for a high -volume targeted traffic. Since then, Eleven11Bot has become a hero in other attacks.

Nokia Security Researcher Jérôme Meyer In a LinkedIn article, “On February 26, 2025, Deepfield’s Emergency Response Team (Ert) has now set an important new botnet for the DDOS attacks watched as ‘Eleven11bot’.” He said.

“The Botnet dimension is extraordinary compared to non -state actor networks, which makes it one of the biggest campaigns known since the invasion of Ukraine in February 2022.”

According to Meyer, Eleven11Bot targets several sectors, Including communication service providers and game industry servers. The intensity of the attacks changes to a great extent and can reach hundreds of millions of data packages (PPS) per second.

What is the DDOS attack?

A DDOS (DEFINING REFUGE OF SERVICE DISTRIBUTED ATTACK) It is a kind of cyber attack aimed at overloading a serviceNetwork or platform with malicious traffic. This is done by pulling a large number of data packages (such as simultaneous access) in a short time.

When successful, the attack makes the service unusable for legitimate users, because The target system is overwhelmed and cannot respond correctly to the requests.

One of the most common ways to perform a DDOS attack is the use of zombie devices. These devices infected with malware, starting to send requests without the user’s knowledge.

https://www.youtube.com/watch?v=8mhii1etx7u

Eleven11Bot case, The attacks are directed by a network of 30,000 devices.According to Nokia. However, other sources, such as Shadowserver Foundation and Censory, indicate different numbers and think that Botnet may have 86,000 or 5,000 active devices, respectively.

What is Botnet?

One Botnet is an infected device network that works in a coordinated way to perform cybers.As DDOS attacked. The name comes from the combination of the terms “robot” and “network”.

Botnet bee serves a lot of tasks: stable devices (webcams, routers, servers, etc.) are remotely controlled and may be instructed to attack a particular goal at the same time.