Four people have lost $500,000 in a major cyberattack that targeted Australian super funds and didn’t just steal money.