Techcrunch Operation PowerOFF Targets 75,000 DDoS-for-Hire Users Worldwide
Article Content
- •Operation PowerOFF involved 21 countries and targeted over 75,000 DDoS-for-hire users.
- •53 domains were seized, and four arrests were made during the operation.
- •DDoS attacks are increasingly used for harassment, extortion, and disruption amid geopolitical tensions.
On April 13, 2026, a coordinated international law enforcement operation named 'Operation PowerOFF' targeted the DDoS-for-hire ecosystem, resulting in the takedown of 53 domains and the arrest of four individuals. Authorities from 21 countries collaborated to send warning emails to over 75,000 suspected users of DDoS services, which allow individuals to launch attacks without technical expertise. The operation revealed more than 3 million user accounts linked to these services, highlighting the scale of the issue. DDoS attacks, which overwhelm websites with excessive traffic, have been increasingly prevalent, particularly during ongoing geopolitical conflicts. The crackdown is part of a broader initiative to disrupt illegal cyber activities and raise awareness about the legal consequences of using such services. The operation also included the issuance of 25 warrants and the removal of over 100 URLs promoting DDoS-for-hire services from search engine results. Authorities aim to deter future attacks through education and enforcement.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (20)
Following this threat?
Track Mirai in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Cling Botnet Exploits Realtek SDK Flaw Using STUN Traffic for C2 The Cling botnet has been identified as exploiting a critical vulnerability (CVE-2021-35394) in the Realtek Jungle SDK, allowing attackers to deploy malware that disguises command-and-control (C2) traffic as legitimate STUN protocol exchanges. This vulnerability, which has a CVSS score of 9.8, was first exploited…