The FBI has seized the domains for NightmareStresser, a DDoS-for-hire service that authorities say has been active since at least 2022 and was part of Operation PowerOFF. SecurityWeek reports the booter had nearly 1 million users and could launch 3,000 to 4,000 attacks an hour.
The service worked as a central rental panel for flooding targets, so taking down its web presence cuts off one large source of bought attacks. But that kind of disruption usually pushes customers toward smaller booters or botnets, which means the demand for DDoS capacity can reappear somewhere else instead of disappearing.
For defenders, the important change is not the removal of one brand but the loss of a major hub in the market. If the service had become a primary on-ramp for low-skill attackers, its disappearance may fragment the ecosystem more than it reduces the overall threat.
Authorities seize popular, long-running DDoS-for-hire service domains
Law enforcement agencies, including the FBI and RCMP, seized domains for NightmareStresser, a prolific DDoS-for-hire operation linked to hundreds of thousands of attacks.