Comment by furyofantares

Yeah, that part doesn't add up. If the email was sent by the attacker, why did it have a code he needed to give the attacker?