U.S. seizes NightmareStresser domains tied to global DDoS-for-hire attacks
U.S. authorities have taken control of two domains linked to NightmareStresser, a DDoS-for-hire service investigators say has been used worldwide since 2022 as part of Operation PowerOFF.
U.S. authorities have moved against a major DDoS-for-hire service, seizing two domains associated with the NightmareStresser platform.
Investigators assessed that NightmareStresser has been used worldwide since 2022 and tied it to hundreds of thousands of distributed denial-of-service attacks and attempts. The service was one of several targeted under Operation PowerOFF, a broader law-enforcement effort against so‑called booter or stresser platforms.
These services advertise themselves as tools for testing network resilience under heavy load. In practice, they allow paying customers to direct large volumes of junk traffic at chosen targets, overwhelming servers and forcing websites or online services offline.
The human impact of such attacks is often obscured by technical jargon. When a hospital scheduling system, municipal portal or small business website is knocked offline for hours, people miss appointments, lose access to services or see revenue disappear.
For operators of critical infrastructure such as power grids, water systems or transport networks, DDoS campaigns can also serve as cover for more serious intrusions, or as probes that reveal how defenders respond.
Taking down two domains will not end the DDoS-for-hire market, which has proved resilient as operators rebrand and shift infrastructure. But each seizure raises the risk for those running or using these services and makes it harder for casual attackers to find them.
Operation PowerOFF has focused on coordinated actions against multiple platforms, sometimes including arrests, indictments or fines. The intent is to disrupt the supply of easy-to-use attack infrastructure and deter would-be customers.
What happens next will depend on whether further operations target other active services, how quickly successor sites appear, and what details emerge from any legal proceedings about NightmareStresser’s users and victims. Those signals will show whether this latest move has a lasting effect on the DDoS-for-hire ecosystem.
Sources
- OSINT