Security experts say the attack highlights how criminals can turn access to internal applications into massive financial losses.