There are three main approaches to organizing a DDoS attack

A study by Kaspersky Digital Footprint Intelligence showed that DDoS attacks remain an accessible service on the dark market. Experts analyzed more than 250,000 publications in the darknet and deep web and identified about 150 active providers of such services.

According to the study “DDoS Economy: How much does it cost to ‘take down’ a website”, attacks are offered on a one-time basis, by subscription, or independently using one's own infrastructure. When ordered from third-party performers, the cost of an operation lasting from one to 30 days ranges from $30 to $2,000. The price depends on the duration and power of the attack, as well as the target. Some sellers offer preliminary testing for about $10 or for free.

With the subscription model, the user gets access to tools for conducting attacks for 30 days. The cost of such a service ranges from $1,000 to $30,000 per month, and the duration of individual attacks can vary from one minute to 48 hours.

The average operating period for a DDoS service provider is about 2.5 years. At the same time, since 2023, the number of new market participants has significantly increased. In the first quarter of 2026, Kaspersky discovered 16 new providers. If the trend continues, their number could be at least 25% higher than in 2025.