It's less common now, but for many years one of the more popular ways to DDOS someone was to trick a third party into sending them lots of data.