Chinese hackers use phishing emails to target engineering, transport and defence companies