FBI Shuts Down Longest-Running DDoS-for-Hire Service in Major Cybercrime Takedown

Post Views: 1

The FBI has seized domain names linked to NightmareStresser, a DDoS-for-hire operation, marking a major step in combating global cyber threats.

Overview of the FBI’s Action

The Federal Bureau of Investigation has taken control of the domain names associated with NightmareStresser, a service described by law enforcement as one of the most enduring booter operations globally. The seizure, detailed in a Department of Justice announcement, targets a platform allegedly responsible for orchestrating extensive distributed denial-of-service attacks against diverse targets across the United States and internationally.

Details of the Seizure

These operations, termed “booting,” are designed to disconnect targeted systems from the internet by overwhelming them with traffic. According to a seizure warrant affidavit, NightmareStresser facilitated hundreds of thousands of DDoS attacks or attempts against victims worldwide starting in 2022. The action aligns with broader international law enforcement efforts to dismantle the infrastructure supporting such services, specifically addressing threats in the District of Alaska and other U.S. regions.

According to a seizure warrant affidavit, NightmareStresser facilitated hundreds of thousands of DDoS attacks or attempts against victims worldwide starting in 2022.

Global and Domestic Impact

Over the past eight years, prosecutors in Anchorage and Los Angeles have charged 12 individuals for operating DDoS-for-hire services, seizing more than 100 domain names connected to these activities. The latest investigation expands on prior successes by targeting all identified booter sites, shutting down as many as possible, and launching a public awareness initiative.

Collaborative Law Enforcement Efforts

The FBI’s Anchorage Field Office collaborated with the Royal Canadian Mounted Police and Federal Policing Northwest Region under Operation PowerOFF, an ongoing global effort to dismantle DDoS-for-hire networks and hold administrators and users accountable.

Threat Landscape and Industry Insights

A 2026 midyear DDoS threat report by Cloudflare highlights that DDoS-for-hire platforms, compromised Internet of Things devices, and automated tools continue to lower the barriers for executing large-scale attacks. The report underscores the growing accessibility of these methods, enabling attackers with minimal technical expertise to disrupt critical services.

Impact on Critical Sectors

Law enforcement agencies emphasize the persistent threat posed by such operations, which have impacted educational institutions, government entities, gaming platforms, and individual users. The seizure of NightmareStresser’s domains represents a significant step in disrupting the financial and operational viability of these illicit services.