'Hidden tunnels' help hackers launch financial services attacks