The ironic part is that unless they have access to a botnet or are operating their own colo facility, they are probably paying more to run the attack than the target is.