FBI seizes domains of long-running DDoS rental service
The FBI has seized the domains of NightmareStresser, a DDoS-for-hire platform that allowed users to rent botnets for launching large-scale attacks. The service had over 566,000 registered users and could generate attacks up to 200 Gbps, according to a 2023 report. The takedown was part of Operation PowerOFF, an international law enforcement effort against DDoS-for-hire infrastructure.
The seizure follows a 2023 report from cybersecurity firm Searchlight Cyber that documented the platform's scale, including over 566,000 registered users and 52 dedicated servers capable of generating attacks up to 200 Gbps across multiple network layers. The FBI's Cyber Division noted the service had been used for hundreds of thousands of attacks since 2022.
This action is part of Operation PowerOFF, which began in December 2018 and has previously taken down services like DigitalStress in the UK, the Dstat.cc review platform, and resulted in arrests in Poland. The operation has also seized dozens of domains in multiple enforcement waves, including a December 2022 action that arrested six suspects linked to similar services.
The takedown of NightmareStresser could reduce the availability of easy-to-use DDoS tools, potentially lowering the frequency of attacks against schools, government services, and gaming platforms. However, operators may quickly migrate to new domains or services, meaning the impact could be temporary. Businesses and organizations that rely on online availability may see short-term relief, but sustained disruption of such infrastructure requires continued international coordination.