Hackers pose as Australians to steal from Sri Lanka Treasury in a sophisticated cyber fraud incident that exposed vulnerabilities in government payment systems.