The British security expert hailed a hero for derailing a global cyber attack admitted to police he created a code which harvests bank details and hinted he sold it, a prosecutor told his US court hearing.