I wonder why they don't get payment gateway IP's from shops, surely some of them work in them, and DDOS those. Maybe too much heat because Visa and MasterCard would lose millions per day and people would lose the ability to pay with their cards?