According to that 2+2 thread I linked, he is likely from Spain, not Sweden. Sweden seems to be a cover, for whatever reason.

The disturbing thing here is that it appears he's found a way to DDoS the entire Merge network, rather than just individual players as he did on Stars and elsewhere.

This shows that Merge is particularly vulnerable to such an attack, while the other sites likely aren't.

Watch Merge worm out of this one, regarding compensating anyone beyond whatever funds they can seized from his account.