A coordinated global law enforcement operation supported by Europol has targeted more than 75,000 users involved in distributed denial-of-service attacks, as part of a wider effort to dismantle criminal DDoS-for-hire infrastructure.
Global action targets DDoS-for-hire ecosystem
The operation, known as Operation PowerOFF, involved 21 countries that joined forces during an action week beginning April 13, 2026, focusing on enforcement and prevention measures against individuals engaged in illegal DDoS services. Authorities sent over 75,000 warning emails and letters to identified users, carried out four arrests, and issued 25 search warrants. The action also led to the takedown of 53 domains linked to such services.
FCRF Returns With CDPO, Its Premier Data Protection Certification for Privacy Professionals
Participating countries included Australia, Austria, Belgium, Brazil, Bulgaria, Denmark, Estonia, Finland, Germany, Japan, Latvia, Lithuania, Luxembourg, the Netherlands, Poland, Portugal, Sweden, Thailand, the United Kingdom, and the United States.
Criminal infrastructure disrupted through coordinated efforts
Ahead of the action week, authorities conducted operational sprints to identify high-value targets and raise awareness about the illegality of DDoS-for-hire activities. These services allow users to launch attacks on websites, servers, or networks using technical infrastructure comprising servers, databases, and other components.
By seizing this infrastructure, authorities disrupted the technical backbone supporting such operations and prevented further harm. The seized databases enabled Europol experts to assist national agencies by providing data on more than three million criminal user accounts, contributing to coordinated global enforcement efforts.
Officials noted that DDoS-for-hire services are among the most accessible forms of cybercrime, enabling individuals with minimal technical knowledge to execute attacks that can significantly disrupt businesses and online services.
Prevention efforts and continued international cooperation
As the operation enters its prevention phase, authorities have launched targeted campaigns to deter future activity. These include placing advertisements on search engines aimed at users seeking DDoS tools, removing over 100 related URLs from search results, and issuing warning messages on blockchains used for criminal payments.
A dedicated website has also been updated to provide visibility into enforcement and prevention actions. Europol’s role included analysing seized datasets, disseminating intelligence to member states, organising investigative sprints, and establishing a command post during the action period.
Law enforcement agencies from multiple countries, including the United States Department of Justice, Federal Bureau of Investigation, Homeland Security Investigations, and various European and international police bodies, participated in the operation.
Authorities stated that Operation PowerOFF will continue with further coordinated campaigns aimed at disrupting illegal cyber activities and preventing future attacks.
