Second group of hackers found also targeting SWIFT users