DDoS Attacks In MENA Up 163%

StormWall, a cybersecurity company specializing in DDoS protection, analyzed attack patterns across the Middle East and North Africa throughout the third quarter of 2025 and shared their findings in a new report. Here are the most important trends.

DDoS attacks in MENA were up 163% year over year in Q3 2025, StormWall data shows, mostly driven by profit-seeking attackers. That’s a change from the previous quarter, when most of the activity came from hacktivists or politically motivated groups.

For-profit hackers and extortionists now make up 68% of malicious traffic, while hacktivists account for just 32%. In Q2, the split was reversed, with politically motivated groups responsible for 73% of attack traffic in the region.

This directly affected which industries were hit hardest by DDoS attacks. Retail became the most targeted sector (22% attack share, 164% year-over-year increase), up from just 7% in Q2 — a 214% quarter-over-quarter jump. A clear warning for retail businesses in MENA, as the risk of DDoS attacks is currently at an all-time high. Finance was the second most affected industry (19% share, 138% year-over-year growth), followed by telecommunications (17% share, 126% year-over-year growth). Another notable trend was the surge in attacks against gaming companies. This vertical saw its share increase from 5% to 14%, nearly tripling over the quarter.

StormWall analysts advise paying close attention to botnet-based attacks. Data shows a 182% year-over-year increase in botnet-driven activity. At the same time, the average botnet now consists of roughly 215,000 compromised devices, up from 140,000 in Q2. Larger botnets can launch more powerful attacks, making websites and services more vulnerable to prolonged downtime.

In terms of the most attacked countries in MENA, Saudi Arabia was the most targeted, receiving 22% of all attacks, which is unchanged from Q2. Qatar was the second most attacked country, with its share increasing from 9% to 17% — an 89% quarter-on-quarter growth rate. The United Arab Emirates was the third most attacked country, accounting for 14% of DDoS traffic in MENA.

“When profit-driven hackers generate the majority of malicious traffic, attack volume usually spikes the most in those sectors where downtime causes the greatest revenue losses,” said Ramil Khantimirov, CEO and founder of StormWall. “That’s why gaming and retail were targeted so heavily in Q3: when websites go down or lag, users leave the platform and often switch to a competitor that wasn’t attacked — or was better protected.”

With profit-driven attackers targeting industries where downtime hits revenue hardest, businesses in retail, gaming, finance, and telecommunications in MENA should strengthen their DDoS protection strategies, StormWall analysts warn.