GreyNoise Intelligence has been tracking a mysterious phenomenon since January 2020 consisting of massive waves of spoofed traffic called Noise Storms.
The purpose behind these Noise Storms is still unknown, but they could be associated with covert communications, DDoS attacks, or misconfiguration.
The traffic originates from Brazil but appears to be obfuscated to conceal the true source, with links to Chinese platforms like QQ, WeChat, and WePay.
These Noise Storms utilize advanced techniques such as TTL manipulation, OS emulation, and precise targeting to make detection and blocking difficult.