It is not unreasonable to assume that this has been changed to the attackers number.
Then, the hacker just gets a local number, which should be easy enough these days.
It is not unreasonable to assume that this has been changed to the attackers number.