[madsushi]

It is relatively easy to trace who injected new BGP routes though, versus a DDoS from a botnet of machines that are difficult to link to an individual.

[ChuckMcM]

Very true, but all it takes is the 'right' compromised server and that seems to be quite achievable with APT types.