A major blow to cybercrime operations: NightmareStresser, a notorious distributed denial-of-service (DDoS) for-hire service, has been severely disrupted in an international operation led by the US Department of Justice. The FBI’s move marks a significant victory in the ongoing battle against online threats, with authorities seizing the internet domains associated with the booter service and taking down its infrastructure.
NightmareStresser was one of the largest and most notorious DDoS-for-hire services on the dark web, with a user base of nearly 1 million individuals. Launched back in 2016, it quickly gained popularity in 2018 after rival services were disrupted, becoming the go-to platform for cybercriminals to launch massive DDoS attacks against unsuspecting victims worldwide. The service was known for its ease of use and high success rate, making it a lucrative business model for its administrators.
The takedown was part of Operation PowerOFF, a coordinated global effort aimed at dismantling DDoS-for-hire infrastructures and holding individuals accountable for their actions. Authorities have been tracking the rise of these services over the past years, noting that they represent low-entry barriers for would-be cybercriminals. Since 2018, the US has charged 12 facilitators of DDoS attacks and seized over 100 domains associated with booter services.
The disruption comes on the heels of similar operations in recent months, including a global effort to take down 53 domains linked to DDoS-for-hire services in April. The move also highlights the growing trend of law enforcement agencies tracking and charging both administrators and users of these services. It’s clear that authorities are no longer just focusing on taking down the infrastructure but also targeting those who use it.
The impact of this takedown will likely be felt across the dark web, as NightmareStresser was one of the most prominent players in the DDoS-for-hire market. While its administrators may have thought they were operating above the law, authorities have made it clear that these services are a priority target for law enforcement.
For individuals and organizations looking to stay ahead of online threats, this takedown serves as a reminder of the importance of robust cybersecurity measures. As DDoS attacks continue to evolve and become more sophisticated, it’s essential to prioritize defensive strategies such as intrusion detection systems, web application firewalls, and regular security updates. By staying vigilant and informed, we can all play a part in disrupting the business model of cybercrime operations like NightmareStresser.
Source: SecurityWeek — 2026-09-18