New research from Kaspersky Digital Footprint Intelligence indicates that hacktivist groups are increasingly utilizing DDoS-for-hire services to amplify their cyber operations, as reported by TahawulTech.
The study analyzed 148 actors and found that nine hacktivist groups are aligning with commercial DDoS providers to enhance their attack capabilities. These providers leverage public hacktivist campaigns to market their services, using the visibility to attract darknet clients. The research highlights a sophisticated advertising ecosystem where providers compete via aggregators, messaging platforms, and traditional cybercriminal forums. Some groups also promote their own custom-made DDoS tools, showing a mix of self-built infrastructure and outsourced services.
The market is expanding rapidly, with 16 new actors identified in the first quarter of 2026. Experts attribute this growth to geopolitical tensions and the accessibility of open-source stresser tools. While the market is volatile, with an average provider lifetime of 2.5 years, some established services have operated for 10 years. Kaspersky suggests that businesses adopt comprehensive digital risk protection and threat intelligence to monitor these emerging threats. Understanding how this ecosystem markets itself allows security teams to identify actors earlier and better anticipate potential attack activity.
Source: TahawulTech
