Social engineering at the heart of critical infrastructure attack