FBI Seizes Domains of NightmareStresser DDoS-for-Hire Service
Summary
The FBI seized domains associated with the NightmareStresser DDoS-for-hire service as part of Operation PowerOFF. Authorities said the service had been used to launch hundreds of thousands of attacks worldwide.
Key points
- The US Department of Justice said the FBI seized domains associated with NightmareStresser, which now display a seizure banner.
- Authorities said the service had been active since at least 2022 and was used in hundreds of thousands of DDoS attacks against victims worldwide.
- A researcher previously reported that the service may have been founded in 2016; the article says it had nearly 1 million users by 2025.
- NightmareStresser reportedly supported 3,000 to 4,000 attacks per hour and accepted cryptocurrency payments.
- The disruption was part of Operation PowerOFF, a coordinated international effort targeting DDoS-for-hire infrastructure and those behind the services.
- The article cites other enforcement actions, including a disruption of 53 booter-service domains by agencies in 21 countries in April.
Article Details
- Event Type
- Law-enforcement disruption and seizure of domains associated with the NightmareStresser DDoS-for-hire service.
- Impact
- The FBI seized the service's domains, which now display a seizure banner. Authorities said the service had been used to launch hundreds of thousands of DDoS attacks against victims worldwide.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | nightmare-stresser[.]com | Domain associated with the disrupted NightmareStresser DDoS-for-hire service; visitors are now served a seizure banner. |
| DOMAIN | nightmarestresser[.]org | Domain associated with the disrupted NightmareStresser DDoS-for-hire service; visitors are now served a seizure banner. |