All that happened in this case is someone created their own coin and sent it to the hacker address. If you create a coin, you can name it whatever you want, and you can send it to whoever you want.