Curious about tonight’s denial of service (again)

Once “it” establishes a TR account, and logs in, how and why exactly does it arrange to spam every minute or so, instead of doing what it can — running continuously and locking up everything on TR?