Cybercriminals are targeting energy firms’ enterprise networks