The attacker sent an email from a stolen address offering to stop his attack for $5000 via libertyreserve.
This was - of course - denied. We do not negociate with internet terrorists!
DDOS protected hosting probably would be cheaper and more reliable.