The U.S. Department of Justice has announced a significant law enforcement operation targeting distributed denial-of-service (DDoS) attack services, commonly known as "booter" services. This operation included the seizure of 27 internet domains linked to these services and criminal charges against two individuals accused of managing such platforms.
These booter services allowed users to conduct DDoS attacks that disrupt targeted computers by overwhelming them with data, impacting a wide range of victims, including educational institutions, government agencies, and gaming platforms. The FBI and DCIS determined that claims of these being "stresser" services for network testing were false.
“Booter services facilitate cyberattacks that harm victims and compromise everyone’s ability to access the internet,” stated United States Attorney Martin Estrada for the Central District of California. S. Lane Tucker, U.S. Attorney for the District of Alaska, emphasized collaboration with international partners in combating this threat.
The FBI considers both launching a DDoS attack or hiring someone to do so as criminal acts. “Cybercriminals are increasingly targeting essential services and our critical infrastructure with DDoS attacks," said Akil Davis from the FBI Los Angeles Field Office.
Kenneth DeChellis from DCIS highlighted the potential damage caused by DDoS attacks: “DDoS attacks are a potent cyber weapon with the proven potential to disrupt critical information systems and infrastructure.” Rebecca Day from the FBI Anchorage Field Office underscored their commitment to combatting cybercrime alongside domestic and international partners.
One defendant has been charged in Los Angeles, identified as Ricardo Cesar Colli from Brazil, accused of operating Securityhide.net. Another indictment in Alaska remains sealed pending further action.
In addition to legal actions, an advertising campaign aims to deter potential cybercriminals searching for DDoS services by educating them on its illegality.
This crackdown is part of Operation PowerOFF, an international effort to dismantle illegal DDoS-for-hire infrastructures globally. Over recent years, previous operations have led to charges against nine defendants and the seizure of over 75 domains associated with such activities.
The cases involve investigations by various field offices across the U.S., along with assistance from international law enforcement agencies and private sector partners like Akamai and Google.