← Back to Crime & Security

International Law Enforcement Takedown Disrupts 53 DDoS-for-Hire Domains

Crime & SecurityAI-Generated & Algorithmically Scored··2 UPDATES

AI-generated from multiple sources. Verify before acting on this reporting.

Update

Additional corroborating reports have been received regarding the international law enforcement operation that dismantled 53 DDoS-for-hire domains. These new reports confirm the initial findings from Operation PowerOFF, which identified approximately 75,000 users across 21 countries. The operation, announced by Europol on Sunday, April 13, 2026, involved authorities from European Union member states, the United States, and the United Kingdom. The additional reports provide further validation of the scale and impact of the takedown, reinforcing the significance of the coordinated effort to disrupt global cyber-for-hire services. No new arrests or charges have been announced at this time, but the corroborating information strengthens the case against the operators of the illegal infrastructure.

Update

BRUSSELS (AP) — Additional reports have emerged confirming the scope of the international takedown of DDoS-for-hire domains. Authorities indicate that the initial count of 53 dismantled domains represents only the first phase of a broader investigation into the cyber-for-hire network. Further analysis of seized server logs suggests the infrastructure supported a larger number of illicit activities than previously disclosed. Law enforcement officials are now reviewing evidence linking the operation to additional criminal enterprises beyond the original 21 countries identified. The expanded scope includes potential connections to ransomware groups and data brokerage operations. Investigators have not yet released details on the specific nature of these new links or the geographic distribution of the additional suspects. The operation remains active as agencies continue to process digital evidence and coordinate with international partners. No new arrests have been announced, but officials stated that further legal actions are expected in the coming weeks as the investigation progresses.

Original Report —

BRUSSELS (AP) — A coordinated international law enforcement operation has dismantled 53 domains linked to illegal distributed denial-of-service (DDoS) attacks, identifying approximately 75,000 users across 21 countries. Europol announced the results of Operation PowerOFF on Sunday, April 13, 2026, marking a significant disruption to the global infrastructure supporting cyber-for-hire services.

The operation involved authorities from European Union member states, the United States, the United Kingdom, Australia, Japan, Brazil, and Thailand. Working in unison, the agencies targeted platforms that allowed individuals to rent out botnets to overwhelm websites and online services. The takedown aimed to sever the technical infrastructure enabling these attacks and deter potential users by highlighting the legal consequences of participating in such activities.

Europol officials stated that the identified users had accessed platforms offering DDoS-for-hire services, which are often used to disrupt business operations, silence critics, or cause widespread digital chaos. The 53 domains seized represented a significant portion of the known market for these illicit services. By removing these platforms, authorities aim to reduce the availability of tools for cybercriminals and disrupt the financial models sustaining the industry.

The operation was executed simultaneously across the 21 participating nations to prevent operators from migrating to other jurisdictions. Law enforcement officials emphasized that the action was not limited to shutting down websites but also involved identifying individuals who had purchased or utilized these services. The identification of 75,000 users suggests a broad reach of the platforms, indicating that the demand for such tools remains high despite ongoing crackdowns.

Cybersecurity experts noted that while the takedown is a major victory, the nature of the internet allows for rapid re-emergence of similar platforms. The technical infrastructure supporting DDoS attacks is often decentralized, making it difficult to permanently eliminate the threat. Authorities warned that operators may attempt to re-establish services under new domain names or through encrypted channels.

The operation also included an awareness component, with law enforcement agencies releasing information to the public about the illegality of DDoS-for-hire services. Officials stressed that individuals who rent these services can face criminal charges in their respective jurisdictions. The message was clear: participating in or facilitating cyberattacks is a prosecutable offense.

As the investigation continues, authorities are working to trace the financial transactions linked to the seized domains. The recovery of funds and the identification of platform operators remain key objectives. While the immediate threat has been mitigated, the long-term impact of Operation PowerOFF will depend on sustained international cooperation and the ability to adapt to evolving cybercriminal tactics.

The operation underscores the growing complexity of international cybercrime and the necessity for cross-border collaboration. As digital threats evolve, law enforcement agencies are increasingly relying on joint operations to combat the global nature of cybercrime. The success of Operation PowerOFF sets a precedent for future coordinated efforts to dismantle illicit online markets.