my company used to be attacked by hackers, they used ddos and sync flood. made the website down. then sent email to our support email demanding usd20k as settlement to stop the attack. we never paid. the attack stop eventually after a few hours. then continued for the next few days, we didn't pay still and they eventually stop permanently.