Critical Infrastructure is being targeted through luring unsuspecting contractors to waterholes and phishing sites