Well there hasn't been an APT (Advanced Persistent Threat) attack yet on a UK bank yet (although we've seen them on banks in the developing world). Perhaps this

Well there hasn't been an APT (Advanced Persistent Threat) attack yet on a UK bank yet (although we've seen them on banks in the developing world). Perhaps this is the first and perhaps the attackers figures that doing many smaller transactions would work for longer than big ones.