Cyber attacks increasingly target people, rather than infrastructure