Hacker Ordered to Pay Back Nearly £1 Million to Phishing Victims