Yandex repelled the Mēris DDoS attack in 2021

Yandex and Qrator Labs published their joint findings on 9 September. They recorded several attacks during August and early September, with the largest on 5 September.

A DDoS attack floods a service with network requests. Here they came from a botnet: many devices under shared control. Investigators named it Mēris; their report did not describe physical server damage.

On 20 September Solar JSOC CERT researchers proposed a possible connection between Mēris and the Glupteba malware. They compared infected-device information with their own observations and passed findings to Russia’s incident-response coordination centre. This was a botnet-origin hypothesis, not a report of another Yandex outage.