Operation PowerOFF Seizes 53 Domains and Warns 75,000 Suspected DDoS-for-Hire Users
Summary
Operation PowerOFF seized 53 domains, made four arrests and sent warnings to more than 75,000 suspected DDoS-for-hire users. U.S. investigators also seized infrastructure linked to Vac Stresser and Mythical Stress.
Key points
- The international operation resulted in 53 domain seizures, four arrests and 25 search warrants.
- Authorities sent warning emails and letters to more than 75,000 people suspected of using booter or stresser services.
- The U.S. Department of Justice said investigators seized infrastructure linked to eight DDoS-for-hire domains, including services branded Vac Stresser and Mythical Stress.
- Investigators said they identified around three million criminal accounts connected to the wider DDoS-for-hire ecosystem.
- Cyble reported a 140% increase in DDoS attacks targeting Israeli entities after September 2025 and up to 40 attacks per day at the conflict's peak.
- The article reports that booter services often reappear under new names or domains, and says lasting disruption may require combining seizures, arrests, financial disruption and user deterrence.
Article Details
- Event Type
- International law-enforcement disruption of DDoS-for-hire services through domain seizures, arrests, search warrants, and warnings to suspected users.
- Impact
- Authorities seized 53 domains, made four arrests, issued 25 search warrants, and sent warning notices to more than 75,000 suspected users. The U.S. Department of Justice said investigators in Alaska seized infrastructure linked to eight DDoS-for-hire domains, including services branded Vac Stresser and Mythical Stress.
MITRE ATT&CK
Products
Mythical StressThe action targeted platforms including Vac Stresser and Mythical Stress and highlighted that DDoS services remain resilient, requiring combined seizures, arrests, financial disruption, and user deterrence for lastingVac StresserThe action targeted platforms including Vac Stresser and Mythical Stress and highlighted that DDoS services remain resilient, requiring combined seizures, arrests, financial disruption, and user deterrence for lasting
Countries
IsraelIn fact, AI-driven threat intelligence company Cyble, in a new research report released today said, DDoS was the primary mode of attack during the ongoing Iran-Israel and U.S.United StatesLaw enforcement agencies across Europe, the United States, and partner nations coordinated Operation PowerOFF to disrupt the commercial DDoS-for-hire ecosystem, seizing domains, making arrests, and issuing over 75,000
Industries
Emergency ServicesWhile sometimes dismissed as nuisance attacks, they can disrupt hospitals, financial institutions, government portals, and emergency services.GamingDDoS-for-hire platforms allow customers to pay relatively small fees to launch distributed denial-of-service attacks against websites, gaming services, businesses, and public infrastructure.GovernmentWhile sometimes dismissed as nuisance attacks, they can disrupt hospitals, financial institutions, government portals, and emergency services.