Hackers are knocking on office doors pretending to be IT staff