You don't have to take over their account, you just need to make it so that their domains no longer resolve. Once that happens the DGA kicks in and all the bots connect to the DGA domain you have registered. You are also telling the wrong person that hijacking domains is hard, ask him about mit.edu.