It modifies who your targets are. You can try to attack people with malicious websites, but in that scenario you can only attack people who manage to visit your

It modifies who your targets are. You can try to attack people with malicious websites, but in that scenario you can only attack people who manage to visit your malicious site. (this example should be considered to include advertising iframes and such.) A VPN provider, however, has a captive audience and can be certain who they are attacking.