The U.S. Department of Justice has announced the seizure of 27 internet domains linked to leading distributed denial-of-service (DDoS) for hire services, alongside criminal charges against two individuals accused of operating these platforms, known as "booter" services.
Federal law enforcement agencies have targeted websites enabling users to conduct DDoS attacks, which overwhelm computers with information and disrupt internet access. These booter services reportedly attacked various victims globally, including educational institutions, government bodies, gaming platforms, and millions of individuals. The attacks not only affect direct targets but also degrade overall internet service quality.
The operation involved websites responsible for millions of actual or attempted DDoS attacks worldwide. While some sites claimed to offer network testing "stresser" services, investigations by the FBI and Defense Criminal Investigative Services (DCIS) revealed these claims were false. An affidavit supporting court warrants noted that communications between site administrators and customers showed awareness that the targets were not their own systems.
United States Attorney Martin Estrada for the Central District of California stated, "Booter services facilitate cyberattacks that harm victims and compromise everyone’s ability to access the internet." He emphasized the significance of this law enforcement action in combatting threats to digital infrastructure.
United States Attorney S. Lane Tucker for the District of Alaska highlighted the global impact: “Cybercrime service providers... affect victims in Alaska and across the world.” Tucker noted partnerships with domestic and international law enforcement aimed at disrupting these harmful services.
Akil Davis from the FBI Los Angeles Field Office warned against using or selling such illegal services: “Whether you launch a DDoS attack or hire a DDoS service...the FBI considers it a crime.” Victims are encouraged to report incidents through local FBI offices or via ic3.gov.
Kenneth DeChellis from DCIS Cyber Field Office remarked on DDoS attacks' potential to disrupt critical systems: “Today’s action... demonstrates the resolve...to disrupt...hacktivist groups and cybercriminals.”
Rebecca Day from the FBI Anchorage Field Office praised international cooperation in combating cybercrime: “This action demonstrates our shared commitment...in defending our digital infrastructure.”
As part of ongoing investigations, interviews with U.S. customers of these services are underway. Authorities continue examining both administrators and customers globally.
One defendant is charged federally in Los Angeles; another faces charges in Anchorage related to operating DDoS-for-hire services. In Los Angeles, Ricardo Cesar Colli from Brazil is accused under the Computer Fraud and Abuse Act for running Securityhide.net booter service. Assistant United States Attorneys Aaron Frumkin and James E. Dochterman lead prosecutions there.
In Alaska, an indictment remains sealed as efforts continue with international partners on arresting a significant booter service administrator. Assistant United States Attorneys Adam Alexander, Ainsley McNerney, and Seth Brickey manage this case.
Complementing domain seizures is an advertising campaign led by Homeland Security Investigations alongside UK’s National Crime Agency and Netherlands Police aiming to deter potential cybercriminals searching for DDoS services through targeted ads triggered by specific keywords.
These actions fall under Operation PowerOFF—an initiative among global law enforcement targeting DDoS-for-hire infrastructures—and build upon previous successes involving nine defendants over four years who facilitated similar illegal activities while seizing more than 75 associated domains.
An indictment serves as an allegation; all defendants remain presumed innocent until proven guilty beyond reasonable doubt in court.
