On September 25th at 3:31 PM EST, the voice-over-IP provider (VoIP) Bandwidth.com reported that they “were experiencing unexpected failures with their voice and messaging services,” caused by a distributed denial-of-service (DDoS) attack. Bandwidth is one of the largest VoIP providers in the US, with many companies relying on them for service such as Twilio, Accent, DialPad, Phone.com, and RingCentral. On September 25th, most of their services were impacted, including 911 emergency services, voice and messaging, and their online portal and portal API. This follows the DDoS attack against the Canadian VoIP provider which the FLASH team reported on 9/21. In the VoIP.ms attack, the attacker, who impersonated the “REvil” ransomware group, demanded one bitcoin to stop the attacks. Many have speculated this to be the same actor, though no evidence of this has been shown yet.