Authorities seize popular, long-running DDoS-for-hire service domains
Authorities seize domains of NightmareStresser, a popular DDoS-for-hire service with alleged Russian ties.
Law enforcement agencies, including the FBI and Royal Canadian Mounted Police, have seized the primary domain and associated websites of NightmareStresser, a long-running distributed denial-of-service (DDoS) for-hire service. The operation, dubbed 'Operation PowerOFF,' targeted a service used by cybercriminals since at least 2022 to launch hundreds of thousands of attacks against various targets globally. While operators claimed to operate under Russian law, making potential prosecution challenging, the takedown highlights ongoing efforts against such services.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonNightmareStresser operated as a commercialized cybercrime service, lowering the barrier for unskilled attackers to launch large-scale DDoS attacks against organizations worldwide. The root problem is the existence of a gray-market economy that profits from enabling disruption, compounded by jurisdictional challenges when operators shelter behind foreign legal systems. This case underscores that even when criminal services operate in permissive legal environments, coordinated international law enforcement can still disrupt and seize infrastructure. Organizations that were targeted suffered real operational harm, highlighting why proactive DDoS defense posture—not just reactive reporting—is essential.
What helps against this
How we list vendors- DNS filtering and secure web gateway
Users cannot reach known-malicious sites, and malware cannot phone home.
- Web application firewall and DDoS protection
Websites and APIs stay up, and common web attacks are filtered before they reach them.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.