A very fascinating story indeed! For people already working in the security industry it might look easy because they used very common attack vectors but the generic public have no idea of these things and they are the typical victims.