Three Eastern Europeans held in July suspected of being among 22 people who used malware to target island’s First Commercial Bank and ATMS in Europe