Me too.
I also wonder whether this sort of attack can be prosecuted in the way that more traditional DDoS attacks are.
After all, when a DDoS attack uses a botnet or some actual hacking, the perpetrator can be subject to various laws against that sort of thing, and against DDoS in general.
But if all you do is send out an email with a link in it, and the DDoS comes from millions of individuals clicking on that link, that's something quite different, isn't it?