Law enforcement agencies worldwide have disrupted a holiday tradition for cybercriminals: launching Distributed Denial-of-Service (DDoS) attacks to take websites offline. As part of an ongoing international crackdown known as PowerOFF, authorities have seized 27 of the most popular platforms used to carry out these attacks. 

Known as ‘booter’ and ‘stresser’ websites, these platforms enabled cybercriminals and hacktivists to flood targets with illegal traffic, rendering websites and other web-based services inaccessible.

This multifaceted operation, coordinated by Europol and involving 15 countries, targeted all levels of those engaged in this crime. Three administrators behind these illicit platforms were arrested, and several actions were taken against numerous users of these services.

The festive season has long been a peak period for hackers to carry out some of their most disruptive DDoS attacks, causing severe financial loss, reputational damage and operational chaos for their victims. The motivations for launching such attacks vary, from economic sabotage and financial gain to ideological reasons, as demonstrated by hacktivist collectives such as Killnet or Anonymous Sudan.

Overview of the operational activities 

• Twenty-seven booter and stresser websites taken down, including zdstresser.net, orbitalstress.net, and starkstresser.net.
• Three administrators arrested in France and Germany.
• Over 300 users identified for planned operational activities.

With countries on opposite sides of the globe involved, Europol – home to the world’s largest network of liaison officers from EU Member States – played a pivotal role in coordinating the international effort.

Europol’s European Cybercrime Centre (EC3) facilitated operational meetings and organised intensive one-week technical sprints to develop investigative leads in preparation for the final phase of the operation.

In addition, Europol provided analytical support, crypto-tracing expertise, and forensic assistance to the investigation, while facilitating the exchange of information through the Joint Cybercrime Action Taskforce (J-CAT), which operates from its headquarters.

An ad a day to keep cybercrime at bay

In response to this growing threat, Operation PowerOFF not only focuses on dismantling the infrastructure supporting these attacks but also takes proactive steps to prevent further incidents. The InterCOP network played an important role in enabling countries to join the PowerOFF operation.

Building on past efforts, law enforcement is launching an online ad campaign aimed at deterring individuals from engaging in such activities. The campaign highlights the consequences of DDoS attacks and will target potential offenders where they are most active: online.