Usually they use the "Ddos" method (Deny of Services), by sending a giant amount of requests to the website they want to put down.