Back Technadu Operation PowerOFF: Europol DDoS Crackdown Secures 4 Arrests
An Europol distributed denial-of-service (DDoS) crackdown involved enforcement and prevention measures that targeted more than 75,000 criminal users with warning emails and letters and led to 4 arrests, the takedown of over 50 domains, and the issuing of 25 warrants.
The strategic initiative, known as Operation PowerOFF, saw 21 nations execute coordinated enforcement actions targeting the proliferation of DDoS-for-hire services on April 13, 2026.
DDoS-for-hire services, commonly referred to as booter services, lower the barrier to entry for cybercrime. These platforms allow individuals with minimal technical expertise to launch severe DDoS attacks against targeted networks.
During the coordinated action week, international authorities systematically seized 53 domains and dismantled the servers and databases that facilitate these illegal operations, according to a recent Europol press release .
Europol provided crucial analytical support, processing seized data to identify over 3 million user accounts. Leveraging this intelligence, law enforcement agencies could execute warrants and arrests to cripple the operation's user base.
The press release suggests motivations vary from curiosity to ideological purposes linked to hacktivism , as well as financial gain through extortion or the disruption of competitors’ services.
Moving beyond immediate disruption, the operation has entered a proactive cybercrime prevention phase. Authorities are launching targeted awareness campaigns, removing 100 illicit URLs from engine indexing, and delivering direct warnings via cryptocurrency blockchains to deter future network attacks.
Earlier this month, a Rostelecom DDoS attack triggered a severe network outage in Russia, and 12 hacktivist groups targeted 110 organizations globally with almost 150 DDoS attacks across more than 15 countries in March.
In February, Spain detained two suspected Anonymous members for DDoS attacks, and Deutsche Bahn confirmed a disruptive DDoS .
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
