Over the weekend and especially yesterday there was a massive cyberattack on X and other US services.
Analysis shows that some group has managed to penetrate Hisilicon embedded processor firmware and they have 30,000 security cameras and digital recording devices under their control.
Unusually the flooding was not just server requests (ping etc), which are easier to manage. They also included volumetric flooding. Reaching nearly 7Tb of bandwidth consumed and forcing traffic shaping which is impacting everyone's experience.
It seems to be somewhat back to normal now, I guess that they are all blacklisted now. However whoever did this stored up all these bots for some time then used them in a single push to damage things.
I have quite a lot of IOT devices around the home. I will be doing a thorough review of my devices over the coming weeks.
My ISP (Orange), livebox, refuses to tell me how much data is passing through the box. Fortunately everything in my home goes through my own router which plugs into the livebox and that router gives me a detailed analysis of realtime and historical data throughput.
I was not contributing to the issue, I am sure of that.
For those who know how, I suggest reviewing your router set up.
I also have my home VPN up on the internet to allow me to connect back to home and manage either home systems or my van systems here by reverse. I have switched off the less secure system and left OpenVPN on, which is patched and secure.