Polish Authorities Crack Down on DDoS-for-Hire Platforms

In a significant blow to the global cybercrime landscape, Polish authorities have arrested four individuals linked to six DDoS-for-hire platforms. These stresser/booter services allowed paying customers to launch devastating Distributed Denial of Service (DDoS) attacks against multiple organizations worldwide, with prices starting at just €10.

The suspects are believed to be behind the now-defunct platforms Cfxapi, Cfxsecurity, neostress, jetstress, quickdown, and zapcut. These services facilitated thousands of attacks on schools, government services, businesses, and gaming platforms between 2022 and 2025. The arrests mark a significant step in combating the growing threat of DDoS-for-hire services.

What are Stresser/Booter Services?

Sstresser/booter services are online platforms that offer DDoS attacks as a paid service. Originally marketed as tools to test the robustness of networks, they have been widely exploited for malicious purposes. These services industrialize DDoS attacks using rented infrastructure, not botnets, and are often sold anonymously via underground forums and the dark web.

Operation PowerOFF: A Global Effort

The arrests are part of Operation PowerOFF, an ongoing international law enforcement initiative launched in 2018 to combat booter platforms. This operation has seen significant success, with Europol, the U.S., Germany, and the Netherlands working together to disrupt DDoS-for-hire services. The seizure of the six DDoS-for-hire platforms is a major milestone in this effort.

Global Coordination

The operation was made possible through global coordination between law enforcement agencies. Dutch authorities deployed fake booter sites and shared seized data, aiding the arrests. The U.S. seized 9 booter domains, while Germany helped identify suspects, highlighting the importance of international cooperation in combating cybercrime.

Prior Arrests

This is not the first time that DDoS-for-hire platforms have been disrupted. In December 2024, a global law enforcement operation part of Operation PowerOFF disrupted 27 of the most popular platforms, including zdstresser.net, orbitalstress.net, and starkstresser.net. Additionally, in November 2024, German police shut down the DDoS-for-hire platform Dstat.cc.

Recent Arrests

In a recent development, two men aged 19 and 28 from Darmstadt and Rhein-Lahn were arrested in Germany for allegedly managing criminal infrastructure used for DDoS attacks and large-scale drug trafficking. Authorities accused them of running the online platform "Flight RCS," which sold designer drugs and synthetic cannabinoids.

Conclusion

The arrests of four individuals linked to six DDoS-for-hire platforms are a significant blow to the global cybercrime landscape. The disruption of these services marks an important step in combating the growing threat of DDoS attacks. As law enforcement agencies continue to work together, it is likely that more platforms will be disrupted and those responsible for these malicious activities will face justice.

Follow Us

Stay up-to-date with the latest news on cybersecurity threats and law enforcement efforts by following us on Twitter: @securityaffairs, Facebook, and Mastodon.