Policy & Regulation
Europol targets DDoS-for-hire services in global operation
Europol led a global operation against DDoS-for-hire services, contacting more than 75,000 suspected users and executing dozens of domain takedowns and arrests.
On Thursday, Europol, the European Union Agency for Law Enforcement Cooperation, announced a coordinated global operation targeting distributed denial-of-service (DDoS) for-hire services. These platforms allow individuals to launch cyberattacks without needing to have any hacking skills or run their own infrastructure. The law enforcement action, dubbed Operation PowerOFF, resulted in four arrests, the takedown of 53 domains, and the execution of 24 search warrants by police.
As part of the crackdown, a coalition of global law enforcement agencies sent warning emails and letters to more than 75,000 alleged cybercriminals who paid for these services to launch cyberattacks that can knock websites offline. Europol said it obtained information about the alleged cybercriminals by raiding and seizing servers associated with these services, which allowed the police to identify their registered users. This direct outreach to more than 75,000 people suspected of using these DDoS-for-hire services represents a coordinated effort to warn users against participating in cyberattacks, signaling that law enforcement is actively tracking the customers of these platforms.
DDoS attacks remain relatively common because of their ability to cause disruption while being relatively easy to carry out, thanks in part to these for-hire platforms. The potential scale of these attacks is illustrated by data from Cloudflare, a web infrastructure and security company, which reported mitigating a DDoS attack last year that registered a peak of 29.7 terabits per second. In response to this ongoing threat, global law enforcement has stepped up its focus on the sector. Over the last few years, the FBI, the US Federal Bureau of Investigation, has conducted several operations targeting DDoS-for-hire services, reflecting a broader, multi-agency push to dismantle the commercial infrastructure that enables low-barrier cyberattacks.
Why it matters
Operation PowerOFF demonstrates a shift in law enforcement strategy from merely taking down infrastructure to directly identifying and warning the user base of DDoS-for-hire services. This approach targets the demand side of the cybercrime market by removing the anonymity of its customers.