Back to Feed
Threat IntelligenceSep 18, 2026

NightmareStresser DDoS Service Disrupted in International Operation

NightmareStresser, a long-running DDoS-for-hire service, has been disrupted by international law enforcement.

The FBI, as part of Operation PowerOFF, has seized domains associated with NightmareStresser, a DDoS-for-hire service active since at least 2022. This global effort aims to dismantle DDoS-for-hire infrastructures and hold their operators accountable. NightmareStresser was capable of launching thousands of attacks per hour and accepted cryptocurrency payments.

AI summary of the linked source. Not reviewed by an editor. How this works

The lesson from this incident

Full lesson

NightmareStresser was a commercially available DDoS-for-hire (booter/stresser) service that lowered the barrier to launching devastating denial-of-service attacks, enabling even unskilled actors to disrupt critical services for a small cryptocurrency fee. The service's ability to launch thousands of attacks per hour highlights how inadequately defended networks remain easy targets for volumetric attacks. Organizations that lack DDoS mitigation controls, traffic anomaly detection, and proper network segmentation are disproportionately vulnerable to such services. This takedown, while positive, is a reminder that the threat landscape constantly regenerates — new stresser services will emerge, making proactive defense essential rather than optional.

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • domain — nightmare-stresser[.]com
  • domain — nightmarestresser[.]org

Entities

NightmareStresser (threat_actor)Operation PowerOFF (campaign)