HR, recruiters targeted in year-long malware campaign