Europol DDoS Crackdown: Operation PowerOFF Dismantles Over 50 Domains, Targets 75,000 Criminals Worldwide, Secures 4 Arrests
- Global enforcement action: Operation PowerOFF united 21 countries to dismantle illegal infrastructure supporting dangerous DDoS-for-hire services globally.
- Massive user targeting: Authorities targeted over 75,000 criminal users, issued warnings, executed 25 search warrants, and secured 4 arrests.
- Technical infrastructure seized: Law enforcement successfully neutralized 53 domains and seized databases containing details on over 3 million criminal accounts.
An Europol distributed denial-of-service (DDoS) crackdown involved enforcement and prevention measures that targeted more than 75,000 criminal users with warning emails and letters and led to 4 arrests, the takedown of over 50 domains, and the issuing of 25 search warrants.
The strategic initiative, known as Operation PowerOFF, saw 21 nations execute coordinated enforcement actions targeting the proliferation of DDoS-for-hire services on April 13, 2026.
Operation PowerOFF: Disrupting Criminal Infrastructure
DDoS-for-hire services, commonly referred to as booter services, lower the barrier to entry for cybercrime. These platforms allow individuals with minimal technical expertise to launch severe DDoS attacks against targeted networks.
During the coordinated action week, international authorities systematically seized 53 domains and dismantled the servers and databases that facilitate these illegal operations, according to a recent Europol press release.
Europol provided crucial analytical support, processing seized data to identify over 3 million user accounts. Leveraging this intelligence, law enforcement agencies could execute search warrants and arrests to cripple the operation's user base.
The press release suggests motivations vary from curiosity to ideological purposes linked to hacktivism, as well as financial gain through extortion or the disruption of competitors’ services.
Enhancing Global Cybercrime Prevention
By neutralizing the underlying infrastructure, Operation PowerOFF actively mitigates the significant financial and operational harm inflicted on global enterprises, online marketplaces, and telecommunications providers.
Moving beyond immediate disruption, the operation has entered a proactive cybercrime prevention phase. Authorities are launching targeted awareness campaigns, removing 100 illicit URLs from search engine indexing, and delivering direct warnings via cryptocurrency blockchains to deter future network attacks.
Earlier this month, a Rostelecom DDoS attack triggered a severe network outage in Russia, and 12 hacktivist groups targeted 110 organizations globally with almost 150 DDoS attacks across more than 15 countries in March.
In February, Spain detained two suspected Anonymous members for DDoS attacks, and Deutsche Bahn confirmed a disruptive DDoS.





