By Olga Smirnovaa and Thomas J. Holt

Research on cybercrime-as-service markets has increased substantially over the last decade, particularly the use of so-called booter and stresser services that enable individuals to engage in high volume denial of service attacks against websites and servers. There is far less research considering the reven-ues vendors may generate from running these services, calling to question whether the economic gains from this form of crime are greater than the potential risk of arrest or legal sanctions. This analysis attempted to estimate the revenues of 42 booter and stresser services in operation after a series of arrests and takedowns by law enforcement. The models presented were basedon the visible characteristics of vendor services, attack volume and customer detail. Three pricing tiers were developed using different potential distribu-tions for booter/stressor markets and find that their potential revenues are of such a magnitude that they may be viewed as an incentive for individuals to enter the market and persist despite the risk of formal sanctions.

DEVIANT BEHAVIOR, 2025, VOL. 46, NO. 10, 1300–1313