[gcb0]

and now the bank just have to block Google's cloud ip range.

[tyingq]

The idea is the bank may not notice, since the site would be functional and serving customers.

Certainly, there's ways to see this is going on, but you could, for example, round robin the DNS and only attack a percentage of traffic.