Full-service digital and cloud infrastructure provider to support customers launching in the fast-growing, emerging regulated Brazilian market with its cutting-edge solutions

Continent 8 Technologies, the award-winning managed hosting, connectivity, cloud and cybersecurity provider to the global iGaming and online sports betting industry, is set to launch in Brazil. This strategic expansion aims to address growing customer demand in this rapidly emerging market. The move comes in anticipation of the market’s quick progression towards a comprehensive regulation of its online offering, with an expected launch in the summer of 2024.

Its move into Brazil strengthens its position in the wider Latin America region, where it has taken an ambitious first-to-market approach to deliver tailored solutions to customers in the likes of Colombia, Peru and Puerto Rico. Brazil adds to a private network spanning more than 100 locations across the world, making it one of the Top 20 best connected networks globally.

Operators and suppliers in Brazil will be able to benefit from Continent 8’s full suite of innovative and reliable digital and cloud infrastructure solutions including a Public Cloud, a scalable and cost-effective offering, with a usage-based commercial model to suit the customer.

Customers will also be able to access its Gaming Exchange, a powerful private internet that offers unrivalled speed, capacity and security, as well as a full suite of cybersecurity solutions designed to combat the ever-changing threat landscape.

Cybersecurity will be a major concern for both operators and suppliers making a move in Brazil as it is a hotbed for cyber attacks, in addition to the iGaming and online sports betting industry being one of the most vulnerable to attack ahead of healthcare and finance.

Luana Monje, Sales Executive at Continent 8 Technologies, said:

“Brazil looks set to be a hugely significant market and one that our customers are keen to explore.

“Digital and cloud infrastructure is the foundation of any successful online business, and we are delighted to be launching in Brazil to support new and existing customers with our solutions and services as they make their move in the market.”

Continent 8 has strategically positioned itself with certified operations in various locations across Latin America. This recent expansion into the Brazilian territory is integral to Continent 8’s long-term Latin American and global growth strategy as the company looks to deliver essential local, technical and regulatory support in each new and emerging market.

Michael Tobin, Founder and CEO of Continent 8 Technologies, added:

“For more than 25 years, we have been supporting customers as they launch into new and growing markets, and we couldn’t be more excited to be doing this in Brazil.

“This is a market that offers tremendous potential to both operators and suppliers, but they must have the right foundation in place to maximise the opportunities on the table. Continent 8 has the experience, expertise and solutions to help businesses do just that.”

The go-to infrastructure provider for the global online gambling industry expands its product suite, offering customers connectivity to Cloudflare

Continent 8 Technologies, the award-winning provider of managed hosting, connectivity, cloud and security solutions to the global online gambling industry, has strengthened its private Cloud Connect solution via a partnership with Cloudflare.

Now, via Cloud Connect, customers can benefit from a direct, private and secure connection between Continent 8 infrastructure and cloud service provider, Cloudflare.

Cloud Connect is a leading solution that allows operators and suppliers to benefit from a secure connection via Continent 8’s private MPLS global backbone. This reduces the public attack surface and provides the highest level of reachability at the shortest “hop” between infrastructure and cloud services.

Continent 8 launched its Cloud Connect private connectivity offering more than six years ago and now provides its customers with fast, secure and resilient access to Cloudflare, Amazon Web Services (AWS), Google Cloud Platform (GCP) and Microsoft Azure.

Justin Cosnett, Chief Product Officer at Continent 8 Technologies, said:

“Growing our product suite by partnering with Cloudflare enables both of us to offer customers the most secure, fast and efficient connectivity.

“It is partnerships such as this that have allowed Continent 8 to become the go-to infrastructure and cloud provider for operators and suppliers in the global online gambling industry, providing a one-stop-shop for customer needs.”

Over the past 25+ years, Continent 8 has earned an unrivalled reputation for reliable infrastructure and connectivity, innovating, developing, and providing services to support the most demanding online requirements. The addition of Cloudflare is a testament to this, expanding its Connect portfolio offering.

Edward O’Connor, Chief Technology Officer at Continent 8 Technologies, added:

“Working together, Cloudflare and Continent 8 network architecture teams were able to utilise both our large global networks to identify key points of presence (POPs) where we can interface and exchange private routes for use by our customers, expanding our Cloud Connect capability.

“This is a powerful partnership between two leaders in the infrastructure space and one that allows Continent 8 to bring tremendous added value to its customers.”

The trusted infrastructure provider for the global online gambling industry leverages global cloud experience, supporting customers seeking demonstrable migration expertise and management

Premier Partner

Continent 8 Technologies, the leading provider of managed hosting, connectivity, cloud and cybersecurity solutions to the global online gambling industry, has strengthened its VMware solution capabilities by achieving Premier Partner status in the newly formed Broadcom program.

The Broadcom Partner Program for VMware Cloud Service Providers (VCSPs) enables Continent 8 to remain a trusted VMware partner in delivering managed cloud solutions globally to customers. Being a premier partner means that customers can be confident that Continent 8 meets the highest standards and qualifications in the delivery, management, and support of VMware Cloud Foundation (VCF) and adjacent solutions. Membership in the Program is by invitation only and is available to those key partners to whom Broadcom offers to appoint.

Over the past 25+ years, Continent 8 has earned an unrivalled reputation for reliable infrastructure and connectivity, innovating, developing, and providing services to support the most demanding online requirements. Achieving this partner status demonstrates its value in managing critical workloads.

With 15 public, multi-tenant, regulated clouds, and more than 40 private, dedicated tenant clouds globally, Continent 8 can offer customers best-in-class managed and professional services.

Continent 8 has successfully migrated many customers from non-virtualised and existing VMware infrastructure to fully managed and compliant clouds, bringing cost savings via licensing scale and 24/7 support capability.

The company manages more than 150 cloud customer virtual environments, across North America, Europe, Asia and Latin America, bringing a repeatable high-quality, high resilience, and DDoS-protected experience wherever customers’ workloads need to be.

Continent 8 launched its first public cloud offering almost 10 years ago, and now also provides inclusive off-site backup, object storage, container services and inclusive WaaP and DDoS protection to its customers.

Edward O’Connor, Chief Technical Officer at Continent 8 Technologies, said:

“Achieving Premier Partner status following the Broadcom acquisition and change in commercial environment was an important milestone for Continent 8.

“Not only does this demonstrate to customers our ability to manage and migrate customers’ VMware workloads but retain key cost efficiencies. Adding this to our existing Nutanix, Veeam and AWS partner status and accreditation capabilities allows our customers the option of multiple private and public cloud technologies for regulated requirements.

“It is partnerships and capabilities such as this that have allowed Continent 8 to become the go-to infrastructure and cloud provider for operators and suppliers in the global online gambling industry, providing a one-stop-shop for customer needs.”

Justin Cosnett, Chief Product Officer at Continent 8 Technologies, added:

“This partner status is key to us continuing to enable customers to choose their cloud, and Continent 8 manages, secures and connects them. Customers can engage Continent 8 to undertake all migration activity, minimising any potential cost impact.

“For any customer concerned about reducing technology spend, and minimising management overheads, Continent 8 offers a comprehensive alternative, maintaining or even improving regulatory compliance via inclusive backup. With two more public clouds being launched in the next quarter in US and LatAm, the growth and adoption of our cloud capabilities is a testament to our professional and managed services teams.”

In today’s business landscape, accepting credit cards is crucial for competitiveness. This is especially true in sectors like online gambling.

Increasing incidents of credit card fraud, identity theft and data breaches have pushed businesses to employ a secure environment for card transactions. Failure to protect this sensitive information can result in a loss of trust from customers towards both merchants and financial institutions.

As a bridge to ensuring this trust and security, adherence to the Payment Card Industry (PCI) standards becomes essential. Every credit card transaction processed by your business needs the protection these standards offer. For online gambling businesses, where transaction volume and frequency are notably high, this compliance is even more crucial.

However, irrespective of the size of your online gambling business, all businesses, from start-ups to large corporations, must comply. This ensures the security of your customers’ cardholder information and maintains your standing as a trustworthy organization in the online gambling space.

PCI compliance: An overview

PCI compliance is a set of security standards designed to protect card transactions against data theft and fraud. It is established by the PCI Security Standards Council (PCI SSC). The standards are comprehensive, covering a wide range of security measures to ensure the safe handling of sensitive data.

Significant revisions and updates have been made to the PCI Data Security Standard (PCI DSS) in its version 4.0, released in the first quarter of 2022.

In January 2022, a draft preview of the standard was provided to Participating Organizations, Qualified Security Assessors (QSAs) and Approved Scanning Vendors (ASVs). The council then released the final versions of the standard, which included validation documents and the initial phase of standard translations, for March 2022.

Notably, PCI DSS v3.2.1 will remain in effect until March 31, 2024. This transition period of two years allows organizations time to adapt and implement the new standards. After this period, PCI DSS v3.2.1 will be retired and v4.0 will become the exclusive active version of the standard.

PCI DSS 4.0 introduced a variety of updates since its inception. Key points among these updates are:

  1. Evolved terminology for network security: The standard has shifted its terminology from “firewalls” to “network security controls.” This change acknowledges a wider array of technological solutions that achieve the security outcomes traditionally associated with firewalls.
  2. Broadening of requirement 8: Requirement 8 now encompasses the implementation of multi-factor authentication (MFA) for any access to the cardholder data environment. This expansion signifies a stronger emphasis on authentication measures.
  3. Enhanced flexibility in compliance: The revised standard offers greater flexibility, allowing organizations to demonstrate compliance through various methods tailored to their specific security goals.
  4. Introduction of targeted risk analyses: Organizations are now granted the latitude to decide the frequency of certain security activities. This addition is designed to align security practices more closely with each entity’s unique business needs and risk profile.

PCI’s Web Application Firewall

Under PCI 4.0, the role of Web Application Firewalls (WAF) in securing online platforms is more pronounced. A WAF is a security system that monitors, filters and blocks potentially harmful traffic to and from a web application. It acts as a gatekeeper, ensuring that only safe traffic reaches the application, which is crucial for online gambling sites handling sensitive user data.

A WAF is particularly effective in protecting against common web attacks. These include SQL injection, cross-site scripting and other vulnerabilities that can be exploited to gain unauthorized access to data.

The PCI DSS outlines specific criteria regarding WAFs to bolster online security. One of those criteria is Requirement 6.4.2, which necessitates the deployment of an automated tool dedicated to continuously detecting and thwarting web-based attacks targeting web applications. This is a significant enhancement from the previous requirement that only called for periodic vulnerability scans of web applications.

Another critical aspect is Requirement 6.6, which stipulates that all web-facing applications must be shielded from known threats. This can be achieved through several methods. One option is to conduct a thorough analysis of all custom application codes for common vulnerabilities, undertaken either by the organization itself or by an external expert specializing in application security.

Alternatively, organizations can install an application-layer firewall as a frontline defence for their web-facing applications. The use of automated source code review tools, along with both automated and manual web vulnerability assessment tools, is also a viable approach.

When opting for a WAF, ensure that it is configured correctly to provide effective protection. However, it’s crucial to note that merely employing a WAF is not sufficient to fulfill the entire spectrum of PCI DSS’s web application security requirements. Comprehensive strategies encompassing multiple layers of security measures are necessary to fully adhere to these standards.

Plan with Continent 8 Technologies

Understanding and adhering to the intricate requirements of PCI compliance might seem daunting, but don’t worry, we’ve got you covered.

For businesses in the online gambling sector, it’s essential to evaluate your current security measures critically. Are your web-facing applications adequately protected against potential threats? If the answer is anything but a “yes,” you should start planning to get it done.

Planning ahead is vital to ensure that your business not only complies with PCI requirements but is also fortified against a broad spectrum of cyber threats. By taking proactive steps now, you can secure your operations and maintain the trust of your customers in this rapidly evolving digital landscape.

This is where C8 Secure steps in. We offer comprehensive Web Application and API Protection (WAAP) solutions tailored to the unique needs of online gambling enterprises. Our services are designed to provide robust security layers, encompassing everything from automated vulnerability assessments to advanced application-layer firewalls. By leveraging these solutions, you can safeguard your web applications against both known and emerging threats.

Our WAAP solutions represent a proactive approach to online security that aligns with the stringent standards set by the PCI and beyond.

To support operators ensure they are PCI compliant, Continent 8 is offering 3 months FREE WAAP services for the first 50 customers to sign up to a 15-month contract*.

Learn more here: Waap solution for PCI compliance

 

*T&Cs apply. Limited-time offer; subject to change. First 3 months free, when signing up to a 15 month contract.

Global IT and infrastructure provider bolsters its global sales team with new hire

Ai Regional Sales Director

Continent 8 Technologies, the trusted infrastructure and cybersecurity provider to the global gambling industry, has fortified its commercial team with the appointment of Ai Ishii as Regional Sales Director.

Ai is a highly experienced business development specialist with skills in sales, solution design, and fostering strategic partnerships, and has worked for renowned organisations such as Bragg Gaming and nChain. She joins Continent 8 from Klein Group where she was a Business Development Consultant.

As Regional Sales Director, Ai will be responsible for maximising existing customer relationships and creating new sales growth opportunities, with a particular focus on the European market. With a solid understanding of the iGaming regulatory landscape, she will work with customers to build technical solutions ensuring regulatory compliance and solving industry-specific pain points.

Ai Ishii, Regional Sales Director at Continent 8, said:

“I have worked closely with members of the Continent 8 team for some time now and have been very impressed with the company and the solutions it offers. I’m incredibly proud to be joining the organisation as Regional Sales Director and to be working closely with people that I admire and respect.

As the global gambling industry continues to grow and expand into new markets, Continent 8’s solutions are in high demand, and I’m excited to be supporting existing customers and welcoming new ones.”

Brian Koh, Chief Commercial Officer at Continent 8 Technologies, added:

“Ai is a business development specialist with a proven track record of striking strategic partnerships and helping both parties to maximise the potential of the collaboration.

We are thrilled to bring her expertise and experience into Continent 8 as we continue on our mission to power and protect the biggest brands in the gambling industry.”

Super Bowl LVIII between the San Francisco 49ers and the Kansas City Chiefs on 11 February 2024 at the Allegiant Stadium was the first Super Bowl to be held in the state of Nevada, and the second ever to be decided in overtime. The event boasted record views of around 124 million (up from 113 million last year), with watchers enjoying the longest Super Bowl in history!

It was also a record-breaking 2024 in gambling terms, with an estimated 68 million US adults betting $23.1 billion, compared to last year’s 50.4 million US adults and $16 billion in bets, and a reported 11% increase in wagers across UK & Europe as NFL popularity grows outside the US.

This year also saw at least one $1m bet and a six-figure wager on the coin flip (it landed on tails BTW).

If we look at a few operators, FanDuel reported record $14 million bets on the Super Bowl with a total handle of $307 million, Entain reported 74% YoY increase in quantity of bets in the UK alone, and in Nevada itself, the Gaming Control Board reported a record breaking $185.6m wagered across 182 sportsbooks.

As the largest network, infrastructure and security supplier to the US and global market, Continent 8 can report its stats for Super Bowl LVIII:

Being prepared for a surge in betting

Continent 8 is no stranger to supporting high-traffic sporting contests. Whether it is annually for the Grand National or Cheltenham horse racing events in the UK and Ireland, the UEFA Champions League across Europe, March Madness in the US, or every four years for the UEFA Euro finals or FIFA World Cup, we know what it takes to ensure platform uptime.

As the infrastructure and hosting solution partner of choice to iGaming and sports betting operators and suppliers, live in 30 US states, and supporting 85% of operators on the 2023 EGR US Power Rankings, we have in place the solutions and support systems that ultimately give operators the confidence they need to maximize the acquisition and retention opportunities these events present.

As standard for identified special sporting events, we:

In addition to this:

What’s key throughout is ensuring our customers are aware of all activity with notifications regularly sent such as internet and MPLS data, as well as average and maximum traffic in and out.

The Super Bowl is a huge event for sportsbooks, particularly now that the US has opened up online gambling in more than 30 states.

And after a very short amount of breathing space, we prepare for March Madness in the same vein!

Why choose Continent 8 for iGaming hosting in the USA?

Live in 30 states

Our expansion in the US began with a state-of-the-art data centre in Atlantic City, enabling customers to take advantage of the sports betting market opportunities in New Jersey, while gaining immediate access to the Continent 8 global network. Today we are live in 30 US states, with several new states in the pipeline. What’s more, we have secondary sites in several key US states, providing true disaster recovery capabilities.

First-to-market

We have an aggressive strategy to ensure we are the first iGaming hosting provider in state, enabling our customers to capitalise on the fast-growing and competitive US iGaming and sports betting market.

Regulated and compliant

We have vast regulatory experience with strong regulator relationships across states, ensuring a complaint gaming solution for each.

Growing global team

We are a global team with a local presence – we ensure we have a team on the ground in the US to help you expand.

Learn more about our trusted solutions in the USA here or contact the team via sales@continent8.com

Sources: ESPN, EGR

Gaming executive with more than 30 years of tribal, gaming and cybersecurity experience joins global infrastructure and cybersecurity business

Leading managed hosting, connectivity, cloud, and cybersecurity provider to the gambling industry, Continent 8 Technologies, has welcomed Jerad Swimmer to its global sales team as the business continues to expand at scale and pace.

Jerad is a highly experienced business development executive with 33 years of experience in the global gaming industry. He has worked for seven Tribes and held positions at Gaming Laboratories International, FABI Cash, Indigo Sky Casino, and 13 other gaming facilities, as well as serving under the Quapaw Tribal Gaming Agency and the Eastern Shawnee Tribal Gaming Commission. He joins Continent 8 from BIG Cyber where he was Director of Business Development for the past 12 months.

Based in Miami, Oklahoma, he will bring this vast tribal and cybersecurity experience to the role of Regional Sales Director at Continent 8, where he will be responsible for supporting the company’s growth across North America. With his knowledge of the North American Tribal landscape, he will be focused on empowering Tribal and commercial gaming operators, ensuring these businesses have the very best infrastructure solutions and cybersecurity protections in place to succeed in the competitive landscape.

Michael Tobin, Chief Executive Officer and Founder at Continent 8 Technologies, said: “I’d like to give a warm welcome to Jerad who becomes the latest member of our global sales team.

“Jerad is an industry veteran, with a deep understanding of the US market and the infrastructure and cybersecurity solutions businesses need to succeed in tightly regulated and highly competitive markets. With Jerad on board, we can continue to deliver a world-class experience to our existing customers while engaging those yet to work with us.”

Jerad Swimmer, Regional Sales Director at Continent 8 Technologies, added: “It’s an honour to join Continent 8’s global sales team and to be able to support the business with its plans for the North American market, specifically focused on developing relationships with Tribal businesses and Tribal leaders. As a proud member of the United Keetoowah Band and growing up in the gaming industry, I must do my absolute best to protect Tribal country and Tribal assets; the biggest asset being the youth which is the future of our Tribes.

“I look forward to working closely with Tribal Governments, operators, regulators, and suppliers over the coming months and helping them to find the right cybersecurity solutions for their needs. After all, cyber risks are at an all-time high, and all businesses must be prepared. This is an aspect of business that simply can’t be ignored, and Continent 8 has the solutions and services needed to ensure resilience and protect sovereignty, assets, networks, systems, and data.”

Jerad will be attending RES 2024, presented by the National Center for American Indian Enterprise Development, March 11-14, 2024, in Las Vegas.

Global digital infrastructure solutions provider expands within state through new strategic site opening, further ramping up its disaster recovery capabilities, coupled with the West Virginia [Lottery] regulatory approval for its recognised public cloud solution catering to the online sports betting and iGaming verticals

Continent 8 Technologies, the renowned provider of digital infrastructure including managed hosting, managed network and cybersecurity solutions to operators and suppliers in the fast-growing North American market and beyond, is ramping up its offering in West Virginia with the opening of an additional site.

Continent 8 has deployed an ambitious first-to-market approach in the United States, notably going live in West Virginia via a site in South Charleston in 2018, permitting customers to hit the ground running when online sports betting launched in August later that year.

Located over 200 miles away from the South Charleston site, Continent 8, in partnership with the Seneca Rocks Regional Development Authority, has now officially opened its data centre in Petersburg, West Virginia. As a result, it now adds true disaster recovery and enhanced business continuity to its suite of solutions available to operators and suppliers in the state via this dedicated site. Both sites are PCI DSS compliant.

Further expanding its solutions and capabilities in the state, Continent 8 has received approval by the gambling regulator in West Virginia, for its powerful Public Cloud solution, currently live across the majority of regulated gaming states across the US. Meeting strict regulatory requirements, operators and suppliers can take advantage of the flexible, usage-based model for those looking to enter the market.

Michael Tobin, Founder and Chief Executive Officer at Continent 8 Technologies, said: “We are thrilled to have added a second site, allowing us to expand our offering to include disaster recovery, as well as our approved Public Cloud solution in our original site, further establishing Continent 8 as the leading infrastructure provider in the North American market.

“Infrastructure is the foundation operators and suppliers need to succeed, and that’s why the biggest players come to Continent 8. Our solutions, customer service, reputation and experience are unrivalled.”

Continent 8 is the leading infrastructure provider in North America for the online gambling industry, with 85% of operators on the 2023 EGR US Power Rankings using its suite of managed hosting and connectivity solutions. In West Virginia, it is live with over 20 of the biggest brands operating in the state.

Continent 8 is live in 30 US states with significant investment planned to further expand its multi-site footprint across numerous states, continuously adding to its global connected network of 100+ locations across four continents.

Craig Lusher, Product Principal [Secure Solutions], discusses the recently uncovered iOS Trojan designed to steal users’ facial recognition data, identify documents, and intercept SMS.

In an era where digital threats are increasingly sophisticated, the discovery of the GoldFactory iOS Trojan, as reported by Group-IB, underscores a critical challenge for businesses and individuals alike. This advanced iOS Trojan, designed to infiltrate iPhones through malicious applications, represents a significant escalation in the cyber threat landscape, particularly for users who assume iOS devices are immune to such risks.

The Trojan, named GoldFactory, exploits a method that bypasses Apple’s stringent app review process, enabling cybercriminals to distribute their malicious software via seemingly benign applications. Once installed, GoldFactory can execute a range of malicious activities, from stealing sensitive facial biometric information to executing phishing attacks, posing a substantial risk to data security and privacy.

Continent 8’s response with Mobile Protect

In response to evolving mobile threats like GoldFactory, Continent 8 Technologies’ Mobile Protect service stands as a defence against mobile cyber threats. Our solution is designed to safeguard iOS and Android devices against a wide spectrum of cyber attacks, including sophisticated Trojans, malware, and phishing schemes.

Mobile Protect leverages cutting-edge technology to provide real-time threat detection and response, ensuring that even the most advanced Trojans, such as GoldFactory, are identified and neutralised before they can inflict harm. The service employs a multi-layered security approach, combining endpoint protection with continuous monitoring and threat intelligence, to offer comprehensive protection for mobile devices.

Addressing business challenges

The advent of Trojans like GoldFactory presents significant business challenges, from the risk of data breaches and financial loss to reputational damage. Continent 8’s Mobile Protect service directly addresses these challenges by:

  1. Ensuring data privacy and security: Mobile Protect guards sensitive data against unauthorised access and theft, crucial for maintaining customer trust and complying with data protection regulations.
  2. Enhancing operational resilience: By safeguarding mobile devices against cyber threats, businesses can ensure uninterrupted operations, protecting against the downtime and financial losses associated with cyber attacks.
  3. Supporting compliance efforts: Mobile Protect aids businesses in meeting compliance requirements, like GDPR, offering peace of mind in an increasingly regulated digital environment.

The detection of the GoldFactory iOS Trojan serves as a stark reminder of the evolving cyber threat landscape and the need for robust security measures. Continent 8 Technologies, through its Mobile Protect service, offers an effective solution to these challenges, providing iGaming casino and sportsbook businesses and their mobile users with the highest level of protection against mobile cyber threats.

As cybercriminals continue to innovate, the importance of proactive and comprehensive security measures cannot be overstated. With Mobile Protect, Continent 8 Technologies reaffirms its commitment to securing the digital frontier, ensuring that businesses can operate with confidence in a connected world.

To learn more about Mobile Protect click here or reach out to a member of the team via sales@continent8.com

Craig Lusher from our Secure team reveals the DDoS stats for the final quarter of 2023 and looks back at attack trends for the iGaming industry across the previous 12 months

 

The fourth quarter saw a total of 187 DDoS attacks launched against Continent 8 customers, a significant decrease from the 1,106 recorded in Q2 and the 359 in Q3. In fact, Q4 was the second-lowest month in terms of attacks, coming in just behind Q1 where 184 attacks were registered.

Before looking at how attack trends played out across the year, let’s first analyse the data from Q4 to understand attack characteristics over the three months.

In the fourth quarter, the intensity of attacks peaked in October with 84 separate incidents recorded with 44 in November and 59 in December. Over the period, a total of 27 customers were attacked making it a widespread issue rather than being isolated to a few organisations.

Malta was the most targeted location, suggesting a geographical focus of the attacks perhaps because of vulnerabilities that had been exploited.

Interestingly, there were no repeat attacks on the same day, indicating that each attack was a unique event. This implies that attacks were well-mitigated after the first occurrence or that attackers did not persist on the same targets within 24 hours.

The average number of attacks experienced by each customer was seven, but the most affected single customer experienced 49 attacks, significantly higher than the average. This suggests that some customers are at greater risk than others and may require additional protective measures.

The largest attack size was 412.9 Gbps but the average attack size throughout the quarter was 2.7Gbps. This is a significant disparity and suggests that while most attacks were relatively small, there were significant outliers that boosted the average.

Across the quarter, only one attack exceeded 100 Gbps which underscores the exceptional nature of the largest attack. The average attack duration was 42 minutes with the longest attack lasting just 3.3 hours, the shortest of the year – the longest attack came in Q2 and lasted a staggering 799.7 hours.

For the fourth quarter, the peak megapackets per second (MPPS) rate came in at 36, the second highest of the year behind the 316.9 recorded in Q2, providing insight into the intensity and potential impact of the attacks.

The Q4 stats show a need for targeted DDoS mitigation strategies, especially in high-risk months and for customers who are more frequently targeted. The data also helps enhance our DDoS Mitigation Solution, allocating more resources during peak attack periods and in regions such as Malta.

The fourth quarter of 2023 sits in stark contrast to 4Q22 where Continent 8 blocked a total of 3,367 separate DDoS events during a well-orchestrated campaign that coincided with the World Cup and the Christmas Holidays.

While the volume of attacks dipped significantly in 1Q23, the second quarter saw a significant resurgence in terms of the volume and size of attacks.

2023: A year in DDoS stats

Q2 would become the standout quarter during the year with a total of 1,106 separate attacks blocked between April and June. This compares with 184 attacks in Q1, 359 in Q3 and 187 in Q4.

The most attacked locations were Kahnawake (Q1), Paris (Q2), Isle of Man (Q3) and Malta (Q4) with January, May, July and October being the months with the most DDoS attacks recorded. The number of unique customer attacks was 83, 29, 24 and 27 respectively.

The highest number of attacks against a single customer came in Q2, with 669 recorded, followed by 98 in Q3, 49 in Q4 and 31 in Q1. The longest single attack lasted 799.7 hours (Q2) with the shortest coming in at 3.3 hours in Q4 – in Q1 it was 5 hours and in Q3, 20 hours.

In terms of trends, Q1 saw a relatively high number of customers attacked at 83 but with a modest number of total attacks and the largest attack size of 49.5 Gbps. This shows that while attacks were frequent, they were less severe.

But Q2 presents a stark contrast. Despite a smaller number of customers being attacked (29), the total number of attacks was incredibly high with a remarkably large attack size of 560.6 Gbps. The high number of attacks against a single customer and the unprecedented longest attack time indicated a period of sustained, severe attacks.

In Q3 the focus of attacks shifted to the Isle of Man in July. The frequency of attacks and the number of customers impacted dropped. So too did the size of the largest attack but at 149.7 Gbps it was still substantial, denoting a continued threat.

For Q4, the size of the largest attack was once again on the rise, coming in at 412.9 Gbps indicating a resurgence in attack severity. That said, the highest number of attacks on a single customer and the longest attack duration were both down, suggesting effective mitigation of attack efforts.

In summary, 2023 began with frequent but less severe attacks which peaked in intensity during Q2 and especially in Paris. As we moved into the second half of the year, we saw signs of decreasing frequency and severity.

That said, the large attack sizes in Q4 indicated that while attacks may have become less frequent, their potential impact remains high, and businesses absolutely must have the protections in place to defend their systems, networks and data against DDoS attacks.

Our data and analysis should also be used to inform cybersecurity strategies moving forward and for resource allocation for DDoS mitigation efforts.

Continent 8’s L3-7 cloud DDoS mitigation service and recent upgrades

Our service provides complete layer 3 through 7 DDoS mitigation with bespoke profiling. Over the past year, Continent 8 has significantly enhanced its DDoS protection service through major upgrades to its network, DDoS platform and customer systems. We have streamlined our Tier 1 provisions by optimising the number of providers and doubling capacity. This was achieved by optimising the number of tier 1 providers, allowing for more efficient global traffic management and engineering.

Additionally, the DDoS service improvements include the introduction of a new scrubbing centre in Denver, which utilises the A10 TPS model consistent with previous deployments and increases the overall DDoS scrubbing capacity available. The expansion of the network edge with Juniper devices across multiple global locations, including NWK1, LON1, and HKG1, enhances the network’s resilience and capacity. These devices offer a significant capacity upgrade, supporting up to 4.8 Tbps, which is a substantial increase over the legacy models.

Furthermore, enhancements to the internal systems and the Customer Portal & API have been made, including the addition of 21 new features, redesigning of six existing features, and the resolution of 29 bugs. These improvements aim to enhance customer experience by providing better notifications, visibility of real-time events, and access to downloadable reports, thereby improving the overall effectiveness and responsiveness of the DDoS protection service.

To learn more about how Continent 8 can help defend your organisation against DDoS attacks with its iGaming cybersecurity solutions, contact a member of the team or head here for more info.

Let's work together.

GET IN TOUCH

Asia +65 3165 4649
Europe +44 1624 694625
Latin America +54 11 5168 5637
North America +1 514 461 5120