It would be like calling every individual connection made during a DDOS event an "attack". No, it's one attack. The number of connections merely indicates the s

It would be like calling every individual connection made during a DDOS event an "attack". No, it's one attack. The number of connections merely indicates the size of the attack, and in this case possibly less because if it's implementing a brute force search over passwords, it could be very, very inefficient. In other words, it's marketing language designed to scare people who have no understanding of computer security.