The US Federal Bureau of Investigation (FBI) has taken down NightmareStresser, one of the world’s most notorious distributed denial-of-service (DDoS) platforms. This move is part of a coordinated effort by international law enforcement agencies to dismantle DDoS-for-hire services worldwide. For years, NightmareStresser allowed anyone to rent botnets of compromised devices and launch massive DDoS attacks on online targets.
NightmareStresser claimed to be the “#1 online IP booter” and “the only DDoS tool available 24/7.” But behind this façade was a sophisticated operation that used over 52 dedicated servers to launch DDoS attacks of up to 200 Gbps, targeting multiple layers of a network. The platform had amassed an impressive 566,000 registered users by 2023.
The scope of the damage caused by NightmareStresser is staggering. According to the FBI Cyber Division, the platform was used to launch hundreds of thousands of actual or attempted DDoS attacks worldwide since 2022. These attacks were aimed at victims from various sectors, including online platforms, services, and even critical infrastructure.
The takedown of NightmareStresser marks a significant milestone in Operation PowerOFF, an ongoing joint law enforcement effort launched in December 2018 to dismantle DDoS-for-hire infrastructures worldwide. This operation has led to the seizure of numerous domains hosting booter platforms, including DigitalStress and Dstat.cc, as well as the arrest of multiple suspects linked to these services.
The success of Operation PowerOFF highlights the importance of international cooperation in combating cybercrime. By working together, law enforcement agencies can disrupt and dismantle complex operations like NightmareStresser, making it more difficult for cybercriminals to launch massive DDoS attacks on online targets.
As a result of this takedown, users who relied on NightmareStresser to launch their own DDoS attacks will need to find alternative means or face the consequences. While this move may not completely eradicate DDoS threats, it demonstrates that law enforcement agencies are committed to protecting online communities from these types of attacks.
For businesses and individuals, this development serves as a reminder of the importance of cybersecurity measures in preventing DDoS attacks. Implementing robust security protocols, such as intrusion detection systems and content delivery networks (CDNs), can help mitigate the impact of these attacks. Moreover, staying informed about emerging threats and best practices for defending against them is crucial in today’s online landscape.
By taking down NightmareStresser and dismantling its infrastructure, law enforcement agencies have sent a clear message to cybercriminals: DDoS-for-hire services will not be tolerated. This move will undoubtedly disrupt the operations of other similar platforms and encourage users to seek alternative means for launching their attacks – or face the consequences.
Source: Bleeping Computer — 2026-09-17