"The use of bulletproof hosting is particularly bad in the case of Magecart, as it eliminates one of the more effective means of stopping the infection - disabling command and control servers."
It doesn't stop the re-assignment of the IP addresses of the DCs concerned. OK, it takes out anything co-hosted there but of the DC operators want to get back into business then they have to clean up, assuming they can given that they're in bandit territory.
Biting the hand that feeds IT
