I've had really negative experience with these type of criminals.

I was hired as a CEO at an <unnamed> company ($200m+ revenue) and we were hit by this type of attack.

Every second of being down cost us literally $10k, so we quickly negotiated with criminals for $5k one time payment and they stopped the attack.

Unfortunataly a few weeks later we were hit by 3 new attacks. Apparently the word had spread and these new attackers demanding $50k.

We were not going to pay $50k but I was also unable to stop the attacks. I was let go a few days later as we had a down time of 2 days and I wasn't able to fix this problem.

Crap.