A successful international operation takes down several IP booter services
In a major international crackdown on cybercrime, Polish authorities have arrested four individuals suspected of running a network of platforms that facilitated thousands of DDoS attacks worldwide. These platforms, known as stresser/booter services, allowed users to pay as little as 10 euros to flood websites and servers with malicious traffic, with the intention of taking them offline. The news of the successful take-down was published on May 7th 2025 by Europol on their website.
Stresser and booter services are often marketed as legitimate testing tools but are widely misused to disrupt online services. They industrialise DDoS attacks by using centralised, rented infrastructure, making them accessible to a broader audience through underground forums and the dark web.
Some of the infamous DDoS booter platforms involved
The dismantled platforms, including Cfxapi, Cfxsecurity, neostress, jetstress, quickdown, and zapcut, were used to target a wide range of entities, from schools and government services to businesses and gaming platforms, between 2022 and 2025. These services offered user-friendly interfaces, enabling even those without technical skills to launch powerful cyberattacks by simply entering a target IP address and selecting attack parameters.
Internationally coordinated effort
This operation was part of a coordinated effort involving law enforcement agencies from four countries, with Europol providing crucial analytical and operational support. The Dutch authorities contributed by setting up fake booter sites to deter potential users and sharing data from seized booter websites with international partners, aiding in the arrests.The United States also played a significant role by seizing nine domains linked to these illegal services, continuing its campaign against commercialised DDoS platforms. Meanwhile, Germany assisted the Polish investigation by identifying suspects and sharing vital intelligence.
This action is part of Operation PowerOFF, an ongoing international initiative targeting the infrastructure behind DDoS-for-hire activities. Europol has reported on this significant development, highlighting the collaborative efforts of international law enforcement in tackling cybercrime.
About FastNetMon
FastNetMon is a leading solution for network security, offering advanced DDoS detection and mitigation. With real-time analytics and rapid response capabilities, FastNetMon helps organisations protect their infrastructure from evolving cyber threats.
For more information, visit https://fastnetmon.com