Hackers managed to transfer over US$13.5 million through a malware attack on the server of Pune-based Cosmos Bank and cloning thousands of the bank's debit cards over a period of two days, a senior bank official said.