FBI Seizes NightmareStresser Domains in Operation PowerOFF
Summary
The FBI seized domains used by the long-running NightmareStresser DDoS-for-hire service. The FBI says it was used for hundreds of thousands of actual or attempted attacks since 2022; the action was supported by Operation PowerOFF.
Key points
- The FBI seized domains used by NightmareStresser, a DDoS-for-hire service.
- The FBI said the service was used to launch hundreds of thousands of actual or attempted DDoS attacks worldwide since 2022.
- NightmareStresser’s former site domains included nightmare-stresser[.]com and nightmarestresser[.]org.
- A 2023 Searchlight Cyber report cited in the article said the service had more than 566,000 registered users and 52 dedicated servers.
- The seizure was supported by Operation PowerOFF, a coordinated international law-enforcement effort targeting DDoS-for-hire infrastructure.
- Earlier actions associated with the operation include other booter-service takedowns and arrests of alleged operators.
Article Details
- Event Type
- Law enforcement seizure of domains used by the NightmareStresser DDoS-for-hire service as part of Operation PowerOFF.
- Impact
- The FBI seized the service’s domains. The FBI said NightmareStresser had been used since 2022 to launch hundreds of thousands of actual or attempted DDoS attacks against victims worldwide. Searchlight Cyber reported that the service had over 566,000 registered users and 52 dedicated servers.
Indicators of compromise
| Type | Indicator | Context |
|---|---|---|
| DOMAIN | nightmare-stresser[.]com | Domain used by the NightmareStresser DDoS-for-hire service and seized by the FBI. |
| DOMAIN | nightmarestresser[.]org | Domain used by the NightmareStresser DDoS-for-hire service and seized by the FBI. |
Products
Countries
Polandthe seizure of the Dstat.cc DDoS review platform, and the arrest of two stresser service operators in Poland.United KingdomPreviously, this operation has led to the takedown of the DigitalStress DDoS-for-hire service in the United Kingdom, the seizure of the Dstat.cc DDoS review platform, and the arrest of two stresser service operators in