Verisign believed that this distribution of attack size was an insightful metric for enterprises as they consider adoption of an on-premise, cloud or hybrid DDoS protection approach.

The size distribution suggested that, according to the report, purely based on size considerations, an on-premise DDoS appliance with a 1 Gbps capacity would be ineffective in at least 59% of the attacks, while a 10 Gbps appliance might be ineffective in handling 20%.

“Hence, a cloud or a hybrid approach to DDoS protection is recommended,” Verisign said in the report.

Verisign also noted a peak volumetric DDoS attack of 60 Gbps and 12 million packets per second for User Datagram Protocol floods, and 34 Gbps/30 Mpps for Transmission Control Protocol floods in the third quarter.

The most common attacks mitigated were Network Time Protocol, Domain Name System and Simple Service Discovery Protocol UDP floods, which collectively accounted for approximately 65% of Q3 attacks.

Another significant disclosure in the report was operating systems once thought to be more secure against malware and vulnerabilities, like Linux, Mac OS X and iOS, are increasingly the target of bot herders and malware authors for cybercrime and hacktivist activities.

The increasing number of data breaches and their consequences could soon hinder the growth of cloud-based mobile apps, according to a recent survey from the Israel-based security firm Radware. The survey revealed 87% of consumers believe cloud-based apps are vulnerable and 54% would stop using them if hacked.

Earlier this week, the Federal Financial Institutions Examination Council issued a statement, “Cyber Attacks Involving Extortion,” alerting financial institutions of the increasing frequency and severity of this particular breed of cyber attacks.

Cybercriminals and activists used a variety of strategies, including ransomware, distributed denial of service, and theft of sensitive business and customer information to extort payment or other concessions from victims, according to the alert. In some cases, these attacks had significant effects on businesses' access to data and ability to provide services. Some businesses suffered serious damage through the release of sensitive information.

Last July, the Internet Crime Complaint Center issued an alert regarding an increasing number of complaints from businesses hit by DDoS extortion campaigns via email. The FBI said it suspects multiple individuals were involved in these ransom plots. In a typical extortion campaign, the targeted business receives an email threatening a DDoS attack on the company's website unless it pays a ransom. Ransoms, usually demanded in Bitcoin currency, vary in price.