DDoS attacks consist of three main components: the attacker, the control server, and the zombie computers. The attacker is the individual or group responsible for initiating the attack and typically uses a variety of techniques, such as email phishing scams or malware, to gain control of the zombie computers. The control server is the central hub that directs the attack and sends instructions to the zombies, while the zombie computers are the systems that are used to flood the target with traffic.