According to from F-Secure's Mikko Hypponen, the attacks focused on Cyxymu's accounts at Twitter, Youtube, Facebook and Livejournal, and also included a "Joe Job" spam campaign that was designed to look as if the unwanted messages had been sent by Cyxymu. McAfee offers with a post that ties the spam campaign to the same botnet that launched the DDoS attack, and says that a cyxymu account at Fotki.com was also targeted.

Cyxymu's Facebook page (currently up) at contains comments and links to Eastern European events and politics. The most recent comments link to news stories on the attacks and claim that Russian media has been silent on the topic.

So the answer to the question, "?" appears to be politics. The explanation makes sense given previous politically motivated DDoS attacks in 2007 that were later tied to Russian hackers, and more recent attacks in 2008 during Georgia's conflict with Russia over South Ossetia.

F-Secure's Hypponen guesses that "nationalistic Russian hackers" are behind the attempt to discredit and silence Cyxymu. The beset blogger himself blames "hackers from Russian KGB," according to a Twitter screen shot in Hypponen's post. In any case, the attacks will likely backfire. Cyxymu will no doubt now attract far, far more attention from around the world than he would have if the DDoS attack had never happened.