It’s interesting to me that most of the traffic originated it Brazil and Vietnam. I assume that this attack was carried out with a botnet. What makes computers in those two countries particularly vulnerable to infection? Maybe a popular software package was infected with malware, but I can’t think of any software that would be specifically more popular in those two locations vs the rest of the world.
I would expect that the number of attacks from a country would be roughly tied to population, but that doesn’t match with the data.
This article is a few years old but Brazil and Vietnam have very high numbers of pirated software https://kommandotech.com/statistics/software-piracy-statistics/
Brazil was fifth and Vietnam was 9th. And unlike many of the other countries on the list, they lack robust network operation infrastructures of built-up corporations or governments.
May just be a coincidence, but if I was a nation or other bad actor looking to create a ready botnet, seems like flooding markets with cracked but compromised copies of software (especially Windows) would be an easy way to accomplish that.
