“PowerOFF” Operation Dismantles DDoS Hub Dstat.cc
Law enforcement agencies have conducted an operation to dismantle the Dstat.cc platform, used to coordinate DDoS attacks. As part of the international “PowerOFF” operation, two suspects connected to the management of this platform, which operated as a DDoS review and “stresser” recommendation service for various types of attacks, were arrested.
Dstat.cc did not directly offer DDoS services but served as a forum where malicious actors exchanged information about the effectiveness of their attacks. Through a Telegram channel with 6,600 participants, cybercriminals discussed recent attacks and promoted their services. This channel is now blocked, and its messages have been removed.
The detention operation was initiated by the Central Office for Combating Cybercrime under the Frankfurt Prosecutor’s Office, supported by Germany’s federal and state police. The arrested individuals, aged 19 and 28, are also suspected of managing the synthetic drug marketplace “Flight RCS,” accessible on the open web.
According to statements from Germany’s Federal Criminal Police Office, platforms like Dstat.cc, which offer so-called “stresser” services, are actively used by hacktivists, including Killnet and Passion, to target critical infrastructures across Europe and the U.S., such as hospitals and healthcare systems.
“Stressers” are online services intended for stress-testing websites or network systems by simulating high volumes of traffic. Initially developed for legitimate purposes to evaluate system resilience under heavy loads, stressers are frequently misused by malicious actors for DDoS (Distributed Denial of Service) attacks, overwhelming a server or network with massive request volumes and rendering services temporarily unavailable.
Under the “PowerOFF” operation, searches and seizures were conducted at seven locations in Germany, France, Greece, Iceland, and the U.S. The arrested suspects will face prosecution under Article 127 of Germany’s Criminal Code, which stipulates penalties of up to ten years’ imprisonment.
This is not the first time that “PowerOFF” has disrupted DDoS services. Previously, platforms like DigitalStress in the UK and several other “stressers” in Poland were shut down. In recent years, DDoS attacks have surged in popularity among activists who seek to leverage cyberattacks for political pressure or extortion.
Notably, many users supplying resources for such attacks remain unaware of the illegal nature of their actions. Recently, Dutch police issued warnings to users of a previously dismantled service, highlighting the consequences of continuing such activities.
