New report reveals how cyber attackers ‘cash out’ following large-scale heists