Assessing the Aftermath: the Effects of a Global Takedown against DDoS-for-hire Services
Anh V. Vu, Ben Collier, Daniel R. Thomas, John Kristoff, Richard, Clayton, Alice Hutchings

TL;DR
This study evaluates a large-scale, multi-wave global intervention against DDoS-for-hire services, revealing short-term reductions in attack volume and insights into the resilience and re-emergence of these illicit markets.
Contribution
It provides the most extensive analysis to date of takedown efforts against DDoS-for-hire services, combining diverse datasets to assess their immediate and short-term impacts.
Findings
First wave reduced DDoS attack volume by 20-40%.
Re-emerged sites struggled to attract visitors, with 80-90% traffic reduction.
Overall impact lasted only about six weeks, indicating high resilience of the illicit market.
Abstract
Law enforcement and private-sector partners have in recent years conducted various interventions to disrupt the DDoS-for-hire market. Drawing on multiple quantitative datasets, including web traffic and ground-truth visits to seized websites, millions of DDoS attack records from academic, industry, and self-reported statistics, along with chats on underground forums and Telegram channels, we assess the effects of an ongoing global intervention against DDoS-for-hire services since December 2022. This is the most extensive booter takedown to date conducted, combining targeting infrastructure with digital influence tactics in a concerted effort by law enforcement across several countries with two waves of website takedowns and the use of deceptive domains. We found over half of the seized sites in the first wave returned within a median of one day, while all booters seized in the second…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsCybercrime and Law Enforcement Studies
