Huge Networks reports 85 percent increase in DDoS attack volume

Huge Networks, a Brazilian company specializing in DDoS mitigation, detected an 85 percent growth in the volume of cyberattacks during the first seven months of 2026. The company released this data through a statement regarding its protection infrastructure. In July, the organization mitigated 6.86 terabits per second of malicious traffic, marking an 185 percent increase compared to June and the highest volume recorded by the company since its founding in 2014.

The company protects more than one thousand organizations in Brazil, including telecommunications operators, financial institutions, fintechs, e-commerce platforms, and public bodies. This client base provides a broad view of DDoS attack trends in the country. From January to July, the infrastructure blocked more than 521,000 attack attempts. The volume of detected attacks grew by 61 percent when comparing January, which recorded 4.26 terabits per second, with July. The frequency of attempts also increased, rising from 85,158 anomalies detected in January to 157,768 occurrences in July.

The Transport layer, or Layer 4 of the OSI model, was the target in 100 percent of the months in the series, concentrating 85.53 percent of the attacks detected in July. The peak of 6.86 terabits per second in July occurred during an attack directed at a telecommunications operator in the Southeast region. This DDoS attack lasted approximately three hours and 20 minutes and was completely mitigated by the infrastructure. The operator's service remained online during the entire period, and subscribers did not perceive the attack.

The volume of 6.86 terabits per second represents a 53 percent growth compared to the company's previous record of 4.47 terabits per second, set in December 2025, and is nearly triple the June 2026 peak of 2.40 terabits per second. Attacks above one terabit per second are classified as hypervolumetric and require robust mitigation infrastructure for effective protection.

The geographic distribution of detected attack attempts changed in July. Santa Catarina concentrated 25 percent of the anomalies, leading the ranking for the first time. It was followed by Paraná with 15.7 percent, São Paulo with 15.6 percent, Rio Grande do Sul with 14.8 percent, and Minas Gerais with 7.7 percent. The South region concentrated 55.5 percent of the attack attempts in July. This pattern represents a significant change from previous months, as Pará led with 23.8 percent in May and the North and Northeast regions accounted for more than half of the occurrences. In June, São Paulo resumed the lead with 25.8 percent, while the North and Northeast concentrated 34.37 percent. The constant alternation in geographic distribution indicates a migration of attackers' preferred targets between different regions of the country.