Clicks to chaos: Understanding DDoS attacks

October 15, 2026 - Edmonton, Alberta
From: Federal Policing Northwest Region

Content

In recognition of Cyber Security Awareness Month, which is observed annually throughout the month of October, the RCMP Federal Policing Northwest Region’s (NWR) Cybercrime Program is warning Canadians and Canadian businesses about the dangers of Distributed Denial-of-Service (DDoS) attacks.

Businesses

The warning signs that a business’s website has been attacked are often immediate: websites become inaccessible, networks slow to a crawl, and businesses race to determine the source of the disruption. In a matter of moments, a DDoS attack can render an organization’s online services inoperable through one of the following methods:

• Volume-based attacks flood the target’s bandwidth with excessive traffic, causing significant congestion. This is the most common method used.
• Protocol-based attacks overwhelm server resources (i.e., firewalls) with malicious connection requests meant to exploit weaknesses in a network’s protocols.
• Application-based attacks overload applications (e.g., web servers and web content management systems) through seemingly legitimate website traffic.

Regardless of the method used, a DDoS attack can be detrimental to business continuity through the disruption of critical services like emails, sales automation, and more – which is difficult in a world where organizations have become more reliant on web-based applications. A successful DDoS campaign may also indicate that your organization could face additional cyber threats or malicious activity.

Defining a cybercrime

Beyond the technical impact of a DDoS attack, it is equally important to understand why these activities are treated as criminal offences and how a cybercrime is understood in a law enforcement context.

The term “cybercrime” is a broad term used to describe any crime where a cyber element has a larger role in a criminal offence and may be categorized as:

• Crimes where technology is being targeted; or,
• Cases where technology is used to commit the crime.

In cases where the former occurs, crimes are often committed for profit, to cause reputational harm, and/or steal personal information to commit identity fraud or to sell on the dark web – which can often fall within the RCMP Federal Policing mandate. Ultimately, the technology can be used in a wide range of illegal activities such as organized crime, terrorist activities, fraud, and money laundering.

This is where the NWR’s Cybercrime Program comes into play, investigating the highest levels of cybercrime directed towards Canada’s institutions of government, critical infrastructure, and institutions and business assets with significant economic impact.

As cybercrime extends beyond any physical border, investigations often involve close coordination with partners across various jurisdictions to identify those who are responsible, mitigate emerging threats, and enhance public safety. To learn more about the RCMP’s many domestic and international partnerships, please visit the RCMP website.

How to protect yourself

While a DDoS attack can disrupt services and systems, there are steps that organizations can take to reduce their risk and limit its impact, including, but not limited to:

• Keeping your devices and security updated through multi-factor authentication;
• Establishing a baseline for normal operations;
• Monitoring your network’s traffic to detect anomalies;
• Establishing an incident response plan for your organization;
• Conducting regular assessments to ensure your infrastructure is operating as intended; and,
• Engaging your Internet provider and cloud service provider to better understand how they can help protect you from future attacks.

To view a more exhaustive list of preventative measures and guidance, please refer to the Canadian Centre for Cyber Security’s webpage.

Individuals

The Government of Canada’s "Get Cyber Safe" public awareness campaign also provides Canadians with numerous resources to better protect themselves by building simple cyber security habits that can make a big difference. Preventative steps may include, but are not limited to:

• Recognizing cyber threats such as phishing, fake messages, and scams powered by Artificial Intelligence;
• Strengthening defences through strong passwords and multi-factor authentication;
• Protecting your personal information when you bank, shop, or use online government services; and,
• Building your own cyber security community by sharing resources with friends and family.

To learn more about the "Get Cyber Safe" awareness month initiative, please refer to the Government of Canada’s website.

If you are in immediate danger, please call 9-1-1.

If you have experienced or witnessed a suspected cybercrime, please report it through the RCMP’s Report Cybercrime and Fraud portal. Submitting a report is quick and can be done anonymously. The information provided may help investigators identify patterns, connect related incidents, and support coordinated action with policing and cyber security partners – which include the National Cybercrime Coordination Centre and the Canadian Anti-Fraud Centre. 

Associated links

• Cybercrime: an overview of incidents and issues in Canada | RCMP 
• Distributed denial of service attacks - prevention and preparation | Canadian Centre for Cyber Security 
• Cybercrime defined | RCMP 
• Report Cybercrime and Fraud | RCMP 
• Get Cyber Safe | Government of Canada
• October is Cyber Security Awareness Month in Canada | Government of Canada

Contacts