HSBC, Santander and the US Federal Trade Commission concerned over email attacks that bypass cyber-defences