How Do Hackers Find Out Who to Hack?