FBI Takes Down NightmareStresser Domains Tied to Massive DDoS Campaigns

The Federal Bureau of Investigation announced Tuesday that it has seized a series of internet domains associated with NightmareStresser, a notorious distributed denial‑of‑service (DDoS)‑for‑hire service that investigators say has been responsible for hundreds of thousands of attacks worldwide since 2022.

According to a joint statement from the FBI and the U.S. Attorney's Office, the seized domains were used to market and facilitate the rental of botnet resources that overwhelm targeted servers, websites, and online services. The operation, which began as a low‑profile offering on underground forums, grew into a sizable business that attracted customers ranging from disgruntled individuals to organized crime groups seeking to disrupt competitors or extort victims.

Law‑enforcement officials highlighted that the scale of the campaign is unusual for a single DDoS‑for‑hire platform. Internal logs recovered during the investigation indicate that the service processed requests for attacks on a daily basis, often delivering traffic volumes measured in gigabits per second. While exact financial figures were not disclosed, the volume of activity suggests a lucrative operation that generated significant revenue for its operators.

Cybersecurity experts note that DDoS‑for‑hire services like NightmareStresser lower the technical barrier for launching attacks, allowing individuals with little technical skill to rent botnet power with a few clicks. The availability of such services has contributed to a rise in disruptive incidents targeting e‑commerce sites, gaming platforms, and critical infrastructure. The FBI’s seizure of the domains is expected to disrupt the service’s ability to attract new customers and may lead to the identification of the individuals behind the operation.

The investigation, which began in late 2022 after a spike in reported DDoS incidents, involved coordination with multiple international partners. Authorities tracked the registration and hosting details of the domains, ultimately obtaining court orders to seize control. The move follows a broader law‑enforcement push to dismantle cyber‑crime marketplaces that operate on the dark web and in the clear.

While the seizure represents a significant blow to NightmareStresser, officials cautioned that other similar services could emerge to fill the gap. They urged businesses to strengthen mitigation strategies, such as employing traffic scrubbing services and maintaining robust incident‑response plans. The FBI indicated that it will continue to monitor related infrastructure and pursue further prosecutions as evidence becomes available.