Wouldn't that hacker include some text in the transaction to prove who did it or send it to an address they control? How they can prove they are the ones that can brag?