Imperva's Application Defense Center (ADC) analyzed how Operation Payback has been conducted.
There are 3 versions of the Denial of Service tool that have been deployed:
- Manual
- Server controlled
- JavaScript version with no download
Below are graphics to show the rate of downloads for the Denial of Service (DoS) tool as well as geographic distribution and screenshots of how they work.
Here is a screenshot of a conversation about directing people to attack PayPal:
The graphs below show how many downloads of the manual denial of service tool have occurred as well as where:
The manual version stats are here (you can change the date to get analysis on a different period).
For the server controlled version, there have been already 33K downloads at a rate of more than 1000 downloads per hour.
There also a javascript version of LOIC that requires no download at all:
Screenshot of Manual Denial of Service tool
Screen shot of instructions for the server controlled tool (our apologies for the language):

