FBI Seized NightmareStresser DDoS Domains
The FBI dismantled the DDoS-for-hire platform as part of a ongoing international effort to combat cybercrime.
Updated on Sept. 27, 2026 in Cybersecurity
Live Poll
Do you feel digital services you use are becoming less secure from cyber attacks?
The FBI seized the domains belonging to the NightmareStresser platform, a service that facilitated distributed denial-of-service attacks. This action was conducted under the multinational Operation PowerOFF.
Why it matters
The operation aimed to disrupt the infrastructure of DDoS-for-hire services and increase the operational costs for those running such criminal businesses. These platforms frequently target sensitive entities like schools and government agencies.
NightmareStresser operated 52 dedicated servers and could launch attacks with a capacity of 200 Gbps. The platform rented access to botnets constructed from compromised routers and IoT devices.
The players
FBI
The Federal Bureau of Investigation is the domestic intelligence and security service of the United States.
Operation PowerOFF
This is a multinational law enforcement initiative focused on dismantling criminal DDoS-for-hire services and botnet infrastructure.
The details
The platform provided users with access to botnets, enabling them to launch significant traffic-based attacks against gaming platforms, educational institutions, and government infrastructure. This seizure marks a renewed effort to shutter the service, which previously faced a domain takedown in December 2022.
Timeline
Operation PowerOFF began in 2018.
NightmareStresser launched its operations in 2022.
The FBI first seized the NightmareStresser domain in December 2022.
The FBI seized the NightmareStresser domains on September 22, 2026.
The Tech Race
This seizure follows the pattern established by the December 2022 Operation PowerOFF enforcement actions. It represents a broader effort to neutralize the accessibility of botnets which have historically made DDoS attacks cheap and easy to execute.
By disabling these platforms, law enforcement aims to reduce the frequency of service disruptions for schools and gaming platforms that users access daily. Organizations may see a temporary decrease in traffic-based cyberattacks following the removal of these tools.
The takeaway
Disrupting these platforms increases the cost of entry for cybercriminals who rely on low-barrier services to launch attacks. Security professionals and the public should continue monitoring for new variations of these illicit tools as older platforms are dismantled.
Further reading
For more on how international law enforcement targets digital threats, visit Cybersecurity.
Source note: This article includes information reported by Computer Crime Research Center.
Live Poll
Do you feel digital services you use are becoming less secure from cyber attacks?
