Operation PowerOFF Shuts Down 27 DDoS-for-Hire Platforms


### #OperationPowerOFF #DDoSCrackdown #CybercrimeInitiative

Summary: Law enforcement from 15 countries has successfully dismantled 27 DDoS-for-hire services as part of ‘Operation PowerOFF,’ resulting in multiple arrests and the identification of numerous customers. This coordinated effort aims to combat the growing threat of DDoS attacks, particularly during peak online shopping seasons.

Threat Actor: Ricardo Cesar Colli, a.k.a. “TotemanGames” | Ricardo Cesar Colli
Victim: Various online businesses | online businesses

Key Point :

  • 27 DDoS-for-hire services were taken offline, including major platforms like zdstresser.net and orbitalstress.net.
  • Three administrators were arrested, with one allegedly responsible for over 4,000 DDoS attacks.
  • Approximately 300 customers of the seized services have been identified, with many facing legal consequences.
  • Europol coordinated the operation, utilizing analytical support and forensic investigation techniques.
  • This crackdown follows previous successful operations against DDoS-for-hire services, indicating a sustained effort to combat cybercrime.

DDoS

Law enforcement agencies from 15 countries have taken 27 DDoS-for-hire services offline, also known as “booters” or “stressers,” arrested three administrators, and identified 300 customers of the platforms.

The action is part of ‘Operation PowerOFF,’ an international initiative to combat cybercrime, specifically distributed denial-of-service (DDoS) attacks.

DDoS-for-hire services are platforms that utilize botnets on compromised devices to launch attacks on behalf of paying customers against online targets of their choice.

These attacks can cause service outages and business disruption to the targets, especially during the peak holiday season, where they can disrupt the increased online shopping.

“This multifaceted operation, coordinated by Europol and involving 15 countries, targeted all levels of those engaged in this crime,” reads a press release from Europol.

“Three administrators behind these illicit platforms were arrested, and several actions were taken against numerous users of these services.”

In this latest crackdown wave coordinated by Europol, twenty-seven booter websites were taken down, including zdstresser.net, orbitalstress.net, and starkstresser.net, which now display seizure notices to visitors.

Seizure banner
Seizure banner
Source: BleepingComputer

The Dutch police (Politie) has also published an announcement about the action, focusing on law enforcement operations and outcomes specific to the Netherlands.

Politie says it arrested four men aged 22-26, who are being prosecuted. One has allegedly conducted 4,169 DDoS attacks, while the others carried out hundreds.

In addition to the arrests, Politie says it has identified approximately 200 people in the Netherlands who are suspected of having used the seized DDoS services.

Many will receive direct warnings delivered to their home by letter or officer visits, while others will be prosecuted, depending on the scale of their activities.

The U.S. Department of Justice announced indictments against two persons associated with the said booter services, Ricardo Cesar Colli, a.k.a. “TotemanGames,” 22, of Brazil, who operated ‘Securityhide.net’ and ‘Securityhide.com,’ and an unnamed defendant who administered “significant booter services.”

The authorities in the U.S. have also interviewed several customers of these services, and will continue to conduct interviews in the context of the ongoing investigations.

Europol says the takedowns and arrests were made possible by its analytical support, crypto-tracing information, and various forms of forensic investigation assistance provided by its specialists at the Joint Cybercrime Action Taskforce (J-CAT).

Just last month, ‘Operation PowerOFF’ announced a significant blow to the DDoS-for-hire space with the seizure of Dstat.cc, one of the largest platforms of this kind, and the arrest of two suspects closely linked to it.

Previously, in July 2024, the UK’s NCA announced, in the context of ‘Operation PowerOFF,’ the infiltration and shutdown of the DDoS-for-hire service DigitalStress.

Update 12/12/24: Article updated to add information about indictments from the U.S. Department of Justice.

Source: https://www.bleepingcomputer.com/news/security/operation-poweroff-shuts-down-27-ddos-for-hire-platforms