Home / Blog / #layer 7

#layer 7

Layer 7 (application-layer) DDoS attacks: HTTP GET/POST floods, HTTP/2 techniques, challenge bypass and real cases from Mēris — the botnet that made Layer 7 attacks a headline topic.

What is Mēris Botnet? The story of the record-breaking DDoS botnet

How a botnet named after the Latvian word for “plague” set world records with 21.8 million requests per second and became the most feared DDoS-for-Hire service on the market.

APT29 Watering Hole: Analytics Script Turned Mobile Exploit Loader

APT29 hijacked the Plerdy analytics script in a massive watering hole campaign serving iOS and Android exploits. We dissect the supply chain lesson.

Cloudflare Bypass — how we get through every plan and challenge

UAM, JS Challenge, Managed Challenge, BFM, Turnstile — why Cloudflare stops most stressers, and why it does not stop us.

How to bypass Qrator DDoS protection — Mēris Blog

Passive filtering, JS Challenge and the feared WASM Challenge — how Qrator defends the RU segment, and how we took 21.8M RPS through it anyway.

DDoS-Guard bypass: marketing promises vs reality — Mēris Blog

DDoS-Guard sells “unbypassable” protection. Here is what actually happens when a real botnet meets their JS Challenge and CAPTCHA modes.

XCPE Botnet Takedown: 1.3M TV Boxes Still Infected

Google sinkholed the XCPE botnet's C2, but 1.3 million backdoored TV boxes remain infected, and their proxy revenue model makes them ideal DDoS assets.

Siemens IoT2050 Vulnerability: A CVSS 10.0 Botnet Recruiter

CVE-2026-58115 turns Siemens IoT2050 gateways into persistent botnet relays via an unauthenticated Node-RED interface. Here's why edge devices recruit so well.