Europol: DDoS-for-hire empire brought down: Poland arrests 4 administrators, US seizes 9 domains
Briefly

Europol's recent announcement details the dismantling of DDoS-for-hire platforms like Cfxapi and neostress, which were allegedly used to execute cyberattacks against schools and businesses from 2022 to 2025. The coordinated international operation led to multiple arrests in Poland with support from other countries, including the US and Germany. Authorities are taking proactive steps, such as deploying fake sites to deter users from engaging with these services, while emphasizing that those exploiting these tools face potential legal consequences.
The now defunct platforms - Cfxapi, Cfxsecurity, neostress, jetstress, quickdown and zapcut - are thought to have facilitated widespread attacks on schools, government services, businesses, and gaming platforms between 2022 and 2025.
The arrests in Poland were part of a coordinated international action involving law enforcement authorities in 4 countries, with Europol providing analytical and operational support throughout the investigation.
Dutch authorities have deployed fake booter sites designed to warn users seeking out DDoS-for-hire services, reinforcing the message that those who use these tools are being watched and could face prosecution.
The United States seized 9 domains associated with booter services during the coordinated week of action, continuing its broader campaign against commercialised DDoS platforms.
Read at Databreaches
[
|
]