Skip to content
FBI Seizes NightmareStresser DDoS-for-Hire Domains in Major Crackdown

FBI Seizes NightmareStresser DDoS-for-Hire Domains in Major Crackdown

First seen 16 Sep 2026, 18:52 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 17, 2026 at 18:24 UTC
  • •FBI seized NightmareStresser domains linked to hundreds of thousands of DDoS attacks.
  • •The service had over 566,000 registered users and allowed attacks of up to 200 Gbps.
  • •This operation is part of the ongoing Operation PowerOFF targeting DDoS-for-hire infrastructure.

On September 15, 2026, the FBI seized the domains of NightmareStresser, a notorious DDoS-for-hire service linked to hundreds of thousands of attacks since 2022. This operation, part of the ongoing Operation PowerOFF, targeted infrastructure enabling users to launch distributed denial-of-service attacks against various victims, including educational institutions and government agencies. NightmareStresser had over 566,000 registered users and offered services that allowed for attacks of up to 200 Gbps. The service was known for its ease of use, allowing even non-technical users to rent DDoS capabilities. The seizure is part of a broader effort that has seen over 100 domains seized and 12 individuals charged in the last eight years. The FBI's actions aim to disrupt the growing trend of accessible cybercrime through booter services.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 44d ago How this analysis works

Timeline

2022-12-12
NightmareStresser domain seized
The DOJ seized the nightmarestresser.com domain and charged six individuals related to DDoS-for-hire services.
KrebsOnSecurity
2026-09-14
CVE-2026-90894 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-15
FBI seizes NightmareStresser domains
The FBI announced the seizure of NightmareStresser domains as part of Operation PowerOFF, disrupting DDoS-for-hire services.
Justice
2026-09-17
NightmareStresser goes offline
The domains nightmare-stresser.com and nightmarestresser.org were taken offline, displaying FBI seizure notices.
The Hacker News

More articles in this cluster (41)

Following this threat?

Track NightmareStresser and CVE-2026-90894 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed