Critical infrastructure is a primary cybercriminal target