Oh, and a great injection point of malware, which can be more sophisticated and selective than the DDoS under discussion. Hard to come up with a more efficient browser-0day deployment pipeline if youre flying under radar and want to be able to target arbitrary individuals.