Latin America emerges as a dominant source of global DDoS attacks, new Gcore Radar report finds
Gcore, the global infrastructure and software provider for AI, cloud, network, and security solutions, announced the findings of its Q3-Q4 2025 Gcore Radar report on DDoS attack trends. New data has identified Latin America as the dominant source of DDoS attack activity globally, with Mexico and Brazil together accounting for 55% of observed network-layer traffic. Mexico alone represents 31% of observed activity, followed by Brazil at 24%.
The scale of the threat has reached new levels. Total DDoS incidents surged 150% year-on-year, growing from 512,000 attacks in Q4 2024 to 1.3 million in Q4 2025. Peak attack capacity hit 12 Tbps — a sixfold increase — driven by broader access to attack tools, expanding IoT ecosystems, and the growing automation of large-scale campaigns.
For iGaming operators, the findings are particularly significant. Gaming ranks among the three most targeted sectors globally, accounting for 19% of all attacks, behind technology (34%) and financial services (20%). The threat extends beyond volumetric disruption: the report highlights a growing shift toward longer application-layer attacks.
— 64% of which now exceed ten minutes — combined with automated abuse targeting account takeovers, scraping, and direct manipulation of platform workflows.
“The latest Gcore Radar report highlights how the threat landscape facing digital platforms continues to evolve. For iGaming operators, it is no longer enough to simply withstand large-scale DDoS attacks — platforms must also detect automated abuse, fraud, and bot activity that directly impacts revenue and player experience. Effective protection today requires not only massive mitigation capacity, but also intelligent behavioural analysis capable of separating real players from malicious automation.” – Dmitrii Gendin, Security Products Growth Lead, Gcore
With attack sources concentrated far from traditional target regions, Gcore’s report underscores the importance of distributed mitigation infrastructure positioned close to threat origins — not just at the destination. Gcore’s security portfolio combines network-layer DDoS protection with application-layer intelligence designed for high-availability environments, including iGaming.
To access the full report, please visit https://gcore.com/resources/gcore-radar-attack-trends-q3-q4-2025
About Gcore
Gcore is a global provider of infrastructure and software solutions for AI, cloud, network, and security, headquartered in Luxembourg. Operating its own sovereign infrastructure across six continents, Gcore delivers reliable, ultra-low-latency performance to enterprises and service providers. Its AI-native cloud stack enables organisations to build, train, and scale AI models seamlessly across public, private, and hybrid environments, while integrating AI, compute, networking, and security into a single platform for mission-critical workloads. Learn more at gcore.com.
